Leonard Cohnen

Add pod-to-pod strict mode tests

5

This PR implements the pod-to-pod strict mode tests in the cilium-cli test suite. Currently, there are similar tests inside the legacy vagrant test suite (https://github.com/cilium/cilium/blob/836598a317565d4c53c678bb09173ae9fee5f54b/test/k8s/datapath_configuration.go#L387). With this PR we could...

Control-Plane node-to-node encryption breaks cluster for cluster-pool IPAM

6

### Is there an existing issue for this? - [X] I have searched the existing issues ### What happened? 1. Create a 1 control-plane node K8s Cluster with stacked etcd...

Support internal load balancer setup on Azure

3

### Context ### Proposed change(s) - Allow to create a Constellation with internal LB instead of public LB. - The actual implementation was done in https://github.com/edgelesssys/constellation/pull/2388 ### Additional info -...

[WIP] Verify Kubernetes components with cosign

4

### Proposed change(s) - This is currently block until Kubernetes 1.26 is released, since it is the first version with signed binaries. ### Checklist - [ ] Update [CHANGELOG.md](https://github.com/edgelesssys/constellation/blob/main/CHANGELOG.md) -...

### Issue description When terminating a Constellation on AWS the `constellation terminate` outputs an error and does not fully clean up the Constellation. Only when running `constellation terminate` a second...

### Issue description `constellation mini up` times out during creation. ### To reproduce Steps to reproduce the behavior: 1. Download the CLI 2. Execute `constellation mini up --debug` ``` 2023-04-06T11:36:01Z...

CFP: WireGuard node-to-node strict mode

11

## Cilium Feature Proposal **Is your proposed feature related to a problem?** Node-to-node encryption is only eventual encrypted due to Endpoint/CiliumNode to IPCache propagation being delayed and only eventual consistent....

Allow upgrades on azure without Terraform changes on LBs created from within Kubernetes

2

### Context ### Proposed change(s) - Remove worker nodes from any existing load balancer backend, since any VM NIC can only be attached to one backend group. Also the worker...

While looping over all the upower devices, the currently set device that will be rendered in the waybar, is overridden. Since the loop doesn't end when the device is found,...

IPv4-mapped IPv6 address cannot be used as route gateway

2

Netlink still makes use of Golang's `net` package, instead of the newer `netip` package to represent prefixes and addresses. In multiple instances netlink checks if a user-given address is a...