projectcalico/calico

Clarify metrics collection from typha in operator based installations 2 days ago

help wanted area/documentation kind/bug kind/enhancement good first issue likelihood/high impact/low area/operator

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Race between BGP and eBPF dataplane causes traffic drops with externalTrafficPolicy=Local 8 days ago

help wanted kind/bug likelihood/low impact/high area/bpf

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

allow fine-grained source/destination selection 8 days ago

kind/enhancement good first issue stale triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

allow announcing smaller k8s service ip routes 15 days ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Set the flag `usageReportingEnabled` to `false` it's not being applied 21 days ago

help wanted kind/bug likelihood/low impact/low triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Checker can not evaluate named ports 23 days ago

help wanted kind/bug likelihood/low impact/low

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Migration from Manifest to Operator install fails on microk8s; `missing expected volume 'var-run-calico' with hostPath '/var/run/calico'.` 25 days ago

help wanted kind/enhancement good first issue area/operator

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Helm "enable metrics" boolean and other config options not well documented about 1 month ago

help wanted kind/enhancement good first issue area/helm stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

[Build] Use host process containers base image for node-windows about 1 month ago

help wanted kind/enhancement area/windows

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Support /64 per node in IPv6 mode about 1 month ago

help wanted kind/enhancement triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Calico unconditionally drops VXLAN packets that are not related to Calico about 1 month ago

help wanted kind/bug likelihood/low impact/high

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Whisker container fails to start if k8s node has FIPS mode enabled about 1 month ago

help wanted kind/bug likelihood/low impact/high area/whisker

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Create health check for whisker-backend about 1 month ago

help wanted kind/enhancement area/whisker

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

feature request: shell completion about 2 months ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

IPAM fails if all pools of an IP version have `assignmentMode: Manual` 2 months ago

help wanted kind/enhancement area/ipam stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

LoadBalancer IPAM: support IP assignment with `Service.spec.externalIPs/loadBalancerIP` 3 months ago

help wanted kind/enhancement good first issue

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

feature: Skip binary copy on read-only system 3 months ago

help wanted kind/bug good first issue likelihood/low impact/high triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Change operator defaults so that Typha no longer ignores node cordoning 3 months ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Support for CNI GC Verb 3 months ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Allow specifying the Helm Chart's imagePullPolicy in values.yaml 3 months ago

help wanted kind/enhancement triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

select nodes to expose NodePort service in eBPF mode 3 months ago

help wanted kind/enhancement area/bpf

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

feature request: Allow for the Calico Typha PDB to be configured with new fields 4 months ago

help wanted kind/enhancement good first issue

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Support for explicit REJECT action in policy rules 4 months ago

help wanted kind/enhancement triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Typha segfaults on invalid global network policies 4 months ago

help wanted kind/bug good first issue likelihood/low impact/high

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

calicoctl node diags try to use docker but kubernetes runs with containerd 5 months ago

help wanted kind/bug good first issue likelihood/high impact/low

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

iptablesFilterDenyAction: REJECT -> calio-nodes do not ready 5 months ago

help wanted kind/bug likelihood/low impact/high

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Bring back CRD descriptions 5 months ago

help wanted kind/enhancement

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Update Kubernetes Node condition `NetworkUnavailable` in case of problems 5 months ago

help wanted kind/enhancement

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Using ip pool annotations on namespaces and node selectors within the ip pools 6 months ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Calico node panic on ppc64le (v3.28.5+) due to CGO_ENABLED=0 6 months ago

help wanted kind/bug likelihood/low impact/high

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Setting TLS 1.3 only ciphers causes API server to fail on startup 6 months ago

help wanted kind/enhancement good first issue

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

calico-node: Error creating / updating resource: DaemonSet.apps "calico-node" is invalid when nonPrivileged is Enabled 7 months ago

help wanted kind/bug likelihood/high impact/high

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Calico SIGSEV on null address in Kubernetes (3.30.1) 8 months ago

help wanted kind/support kind/bug good first issue

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Enable routes to the pod/service networks to be added for multi-homed pods 8 months ago

help wanted kind/enhancement triage/eternal

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

CSI Driver gets Installed contradicting Documentation 8 months ago

help wanted kind/bug likelihood/high impact/low

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Wrong Felix docs for IptablesBackend 8 months ago

help wanted kind/bug good first issue likelihood/high impact/low stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Support IPv6 for `host-local` IPAM plugin in calico 9 months ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Error with defaultFelixConfiguration.enabled: true with Helm 10 months ago

help wanted kind/bug good first issue likelihood/high impact/high area/helm stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Felix and Typha certificates are entangled 12 months ago

help wanted kind/bug likelihood/low impact/low area/observability

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Ability to check network policies syntax using calicoctl dry-run 12 months ago

help wanted kind/enhancement

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Idempotent application of Calico objects 12 months ago

help wanted kind/enhancement stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

FELIX_NATOUTGOINGADDRESS and IPv6 12 months ago

help wanted kind/bug likelihood/low impact/low stale

projectcalico/calico

7.3K

Cloud native networking and network security

Go

#cats#cni#cni-plugin#ebpf#host-protection#identity-aware-policy#k8s#kubernetes#kubernetes-networking#kubernetes-windows#network-policy#networking#observability#openstack#security#windows#xdp

Open Issues Need Help