Skip to content

CI: Conformance GKE (ci-gke) - IPsec related failure #39337

@ldelossa

Description

@ldelossa

CI failure

IPsec related test cases in the Conformance GKE (ci-gke) tests are failing.
This failure is not a flake and is consistent with all runs of ci-gke.

The failure seems to be related to the merging of VinE: #37723

Error Output

⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for deployment cilium-test-1/client to become ready...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for deployment cilium-test-1/client2 to become ready...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for deployment cilium-test-1/echo-same-node to become ready...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for deployment cilium-test-1/client3 to become ready...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for deployment cilium-test-1/echo-other-node to become ready...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for pod cilium-test-1/client-645b68dcf7-zmgt4 to reach DNS server on cilium-test-1/echo-same-node-6c98489c8d-972b4 pod...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for pod cilium-test-1/client2-66475877c6-499w4 to reach DNS server on cilium-test-1/echo-same-node-6c98489c8d-972b4 pod...
⌛ [gke_***_us-east1-c_cilium-cilium-14833987042-1-4] Waiting for pod cilium-test-1/client3-795488bf5-fsx8k to reach DNS server on cilium-test-1/echo-same-node-6c98489c8d-972b4 pod...
timeout reached waiting for lookup for localhost from pod cilium-test-1/client3-795488bf5-fsx8k to server on pod cilium-test-1/echo-same-node-6c98489c8d-972b4 to succeed (last error: command failed (pod=cilium-test-1/client3-795488bf5-fsx8k, container=): context deadline exceeded)

Sysdumps

cilium-sysdump-final-1.32-4-tunnel-ipsec.zip
cilium-sysdump-final-1.31-4-tunnel-ipsec.zip
cilium-sysdump-final-1.30-4-tunnel-ipsec.zip

Latest Failure

https://github.com/cilium/cilium/actions/runs/14833987042/job/41641258207

Metadata

Metadata

Assignees

Labels

area/CIContinuous Integration testing issue or flakearea/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.area/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.kind/bugThis is a bug in the Cilium logic.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions