Search results

Policy not working (random toFqdn drops) after updating to version 1.18.3

info-completedThe GH issue has received a reply from the authorThe GH issue has received a reply from the author

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

need-more-infoMore information is required to further debug or fix the issue.More information is required to further debug or fix the issue.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#42594 In cilium/cilium;

· adamw-linadm opened on Nov 4, 2025

cilium connectivity tests fail in v1.17 and later with nodelocaldns and host port

area/cliImpacts the command line interface of any command in the repository.Impacts the command line interface of any command in the repository.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#42528 In cilium/cilium;

· rptaylor opened on Oct 31, 2025

Host Firewall blocks responses from CoreDNS to pods on nodes running CoreDNS

area/host-firewallImpacts the host firewall or the host endpoint.Impacts the host firewall or the host endpoint.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#42452 In cilium/cilium;

· anazarova935 opened on Oct 28, 2025

CFP: Allow configuring additional sources (e.g. Konnectivity) to be treated as <code>kube-apiserver</code> for <code>fromEntities</code> matching

area/agentCilium agent related.Cilium agent related.

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#42367 In cilium/cilium;

· cwrau opened on Oct 24, 2025

Cilium blocks traffic allowed by network policy

area/agentCilium agent related.Cilium agent related.

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/fqdnAffects the FQDN policies featureAffects the FQDN policies feature

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#42046 In cilium/cilium;

· olocheratwork opened on Oct 6, 2025

The "k8s.io.cilium.k8s.namespace.labels" configuration is not effective.

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41948 In cilium/cilium;

· c18871384325 opened on Sep 30, 2025

[Hubble CLI] <code>--print-policy-names</code> flag does not do anything

area/agentCilium agent related.Cilium agent related.

area/hubbleImpacts hubble server or relayImpacts hubble server or relay

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

kind/questionFrequently asked questions & answers. This issue will be linked from the documentation's FAQ.Frequently asked questions & answers. This issue will be linked from the documentation's FAQ.

need-more-infoMore information is required to further debug or fix the issue.More information is required to further debug or fix the issue.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41912 In cilium/cilium;

· jonasbadstuebner opened on Sep 26, 2025

Obscurity of usage CiliumClusterwideNetworkPolicy

area/agentCilium agent related.Cilium agent related.

help-wantedPlease volunteer for this by adding yourself as an assignee!Please volunteer for this by adding yourself as an assignee!

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

kind/questionFrequently asked questions & answers. This issue will be linked from the documentation's FAQ.Frequently asked questions & answers. This issue will be linked from the documentation's FAQ.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41894 In cilium/cilium;

· idyakonov-dev opened on Sep 25, 2025

Incorrectly dropped traffic until Cilium DaemonSet is restarted

affects/v1.18This issue affects v1.18 branchThis issue affects v1.18 branch

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/fqdnAffects the FQDN policies featureAffects the FQDN policies feature

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

kind/regressionThis functionality worked fine before, but was broken in a newer release of Cilium.This functionality worked fine before, but was broken in a newer release of Cilium.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41873 In cilium/cilium;

· ldunkum opened on Sep 24, 2025

Incorrect behavior of DNS based egress Cilium Network Policy and Kafka host

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/fqdnAffects the FQDN policies featureAffects the FQDN policies feature

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

kind/questionFrequently asked questions & answers. This issue will be linked from the documentation's FAQ.Frequently asked questions & answers. This issue will be linked from the documentation's FAQ.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41872 In cilium/cilium;

· PavloGomeniuk opened on Sep 24, 2025

Network Policy traffic drop response feature improvements

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

release-blocker/1.19This issue will prevent the release of the next version of Cilium.This issue will prevent the release of the next version of Cilium.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41859 In cilium/cilium;

· antonipp opened on Sep 23, 2025

· 

1.19

Network Policies are not applied to overlay networks

area/agentCilium agent related.Cilium agent related.

info-completedThe GH issue has received a reply from the authorThe GH issue has received a reply from the author

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

kind/prerelease-testingPart of testing prerelease snapshotsPart of testing prerelease snapshots

kind/questionFrequently asked questions & answers. This issue will be linked from the documentation's FAQ.Frequently asked questions & answers. This issue will be linked from the documentation's FAQ.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#41858 In cilium/cilium;

· kglushen opened on Sep 23, 2025