25759972426
94%

Ran 12 May 2026 08:21PM UTC

Jobs 3

Files 11

Run time 1min

Badge

Embed ▾

Committed 12 May 2026 08:21PM UTC coverage: 93.78%. Remained the same

Build # 25759972426

Build Type

push

github

Committed by

hardbyte

Commit Message

ci: bump Cilium 1.16 → 1.19, fix kube-apiserver egress example

The Cilium TCP-egress example used `toServices: [kubernetes]` to allow
egress to the Kubernetes API. That rule's matching behavior changed in
Cilium 1.17 — with kube-proxy installed the egress policy stops
allowing service traffic, and the test_tcp_egress_with_cilium_policy
integration test failed on Cilium 1.17/1.18/1.19.

Root cause: kube-proxy DNATs the Service IP/port to the apiserver pod
IP/port before Cilium's bpf policy hook sees the packet (so e.g. the
destination port is the apiserver's internal 6443 in kind, not the
Service port 443). The post-DNAT identity of the apiserver pod is the
`reserved:kube-apiserver` entity, which Cilium has always supported as
an egress target — that's the modern, post-1.17-friendly idiom.

Changes:
- Rewrite tcp-egress-netpol.yaml to use `toEntities: [kube-apiserver]`
  with no port filter (single workload, port already implicit).
- Bump CI integration test stack to Cilium 1.19.3 / cilium-cli v0.19.2
  / kubectl 1.32.2 / kindest/node:v1.32.2. Validated end-to-end on a
  local kind cluster: probe to k8s API on :443 connects, probe to
  :8080 fails (test summary {pass: 2}).
- Fix British spelling 'stabilises' → 'stabilizes' in the new
  Grafana README so the typos action passes.

Coverage Stats

392 of 418 relevant lines covered (93.78%)

5.63 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	Unittests-ubuntu-latest- - 25759972426.1	12 May 2026 08:21PM UTC	11	93.78	GitHub Action Run
2	Unittests-macos-latest- - 25759972426.2	12 May 2026 08:22PM UTC	11	93.78	GitHub Action Run
3	Unittests-windows-latest- - 25759972426.3	12 May 2026 08:22PM UTC	11	93.78	GitHub Action Run

hardbyte / netchecks / 25759972426
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 25759972426

hardbyte / netchecks / 25759972426 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 25759972426

hardbyte / netchecks / 25759972426
94%

README BADGES
x