Skip to content

CI: Cilium E2E Upgrade (ci-e2e-upgrade): Found unexpected packet drops: "No mapping for NAT masquerade" #38466

@gentoo-root

Description

@gentoo-root

CI failure

 [=] [cilium-test-1] Test [no-unexpected-packet-drops] [1/18]
.  [-] Scenario [no-unexpected-packet-drops/no-unexpected-packet-drops]
  [.] Action [no-unexpected-packet-drops/no-unexpected-packet-drops/kind-kind/kind-control-plane]
  ❌ Found unexpected packet drops:
{
  "labels": {
    "direction": "EGRESS",
    "reason": "No mapping for NAT masquerade"
  },
  "name": "cilium_drop_count_total",
  "value": 1
}

...

📋 Test Report [cilium-test-1]
❌ 1/15 tests failed (1/197 actions), 3 tests skipped, 0 scenarios skipped:
Test [no-unexpected-packet-drops]:
  ❌ no-unexpected-packet-drops/no-unexpected-packet-drops/kind-kind/kind-control-plane
    ⛑️ The following owners are responsible for reliability of the testsuite: 
        - @cilium/sig-agent (no-unexpected-packet-drops)
        - @cilium/sig-datapath (no-unexpected-packet-drops)
        - @cilium/ci-structure (.github/workflows/tests-e2e-upgrade.yaml)

https://github.com/cilium/cilium/actions/runs/14037872448/job/39300490118

[=] [cilium-test-4] Test [node-to-node-encryption] [12/23]
.  [-] Scenario [node-to-node-encryption/node-to-node-encryption]
  [.] Action [node-to-node-encryption/node-to-node-encryption/ping-ipv4: cilium-test-4/client-645b68dcf7-6n8gc (10.244.3.95) -> cilium-test-4/host-netns-xjvdl (172.18.0.5:0)]
  🟥 Failed to execute tcpdump on cilium-test-4/host-netns-ntl6c (kind-worker2): command failed (pod=cilium-test-4/host-netns-ntl6c, container=): command terminated with exit code 14

...

❌ 1/21 tests failed (1/254 actions), 2 tests skipped, 0 scenarios skipped:
Test [node-to-node-encryption]:
  ❌ node-to-node-encryption/node-to-node-encryption/ping-ipv4: cilium-test-4/client-645b68dcf7-6n8gc (10.244.3.95) -> cilium-test-4/host-netns-xjvdl (172.18.0.5:0)
    ⛑️ The following owners are responsible for reliability of the testsuite: 
        - @cilium/sig-encryption (node-to-node-encryption)
        - @cilium/ci-structure (.github/workflows/tests-e2e-upgrade.yaml)

https://github.com/cilium/cilium/actions/runs/14037872448/job/39300496603

features-tested.zip
cilium-junits.zip

Often throws various errors in different jobs. Usually succeeds after a restart.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/CIContinuous Integration testing issue or flakearea/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.ci/flakeThis is a known failure that occurs in the tree. Please investigate me!

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions