-
Notifications
You must be signed in to change notification settings - Fork 3.7k
CI: GKE: IPsec + overlay routing is broken #43410
Copy link
Copy link
Closed
Labels
area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flakeci/flakeThis is a known failure that occurs in the tree. Please investigate me!This is a known failure that occurs in the tree. Please investigate me!feature/ipsecRelates to Cilium's IPsec featureRelates to Cilium's IPsec featureintegration/cloudRelated to integration with cloud environments such as AKS, EKS, GKE, etc.Related to integration with cloud environments such as AKS, EKS, GKE, etc.
Description
The scheduled runs for Netperf-GKE and GKE-IPsec started to fail a few days ago, for configurations with IPsec + overlay routing.
From a quick revert session, it doesn't seem to be caused by any of the changes merged during that time.
Considering past problems in this space, a good start for debugging would be either the GKE firewall (#39898) or some behavioral change in iptables (#42327).
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flakeci/flakeThis is a known failure that occurs in the tree. Please investigate me!This is a known failure that occurs in the tree. Please investigate me!feature/ipsecRelates to Cilium's IPsec featureRelates to Cilium's IPsec featureintegration/cloudRelated to integration with cloud environments such as AKS, EKS, GKE, etc.Related to integration with cloud environments such as AKS, EKS, GKE, etc.