cilium: ConformanceEKS (ci-eks) CI: no-policies/pod-to-world/http-to-jenkins-cilium: Fails during connectivity test after deploying with encryption enabled

CI failure

✨ [kind-chart-testing] Creating namespace for connectivity check...
✨ [kind-chart-testing] Deploying echo-same-node service...
✨ [kind-chart-testing] Deploying same-node deployment...
✨ [kind-chart-testing] Deploying client deployment...
✨ [kind-chart-testing] Deploying client2 deployment...
✨ [kind-chart-testing] Deploying echo-other-node service...
✨ [kind-chart-testing] Deploying other-node deployment...
⌛ [kind-chart-testing] Waiting for deployments [client client2 echo-same-node] to become ready...
⌛ [kind-chart-testing] Waiting for deployments [echo-other-node] to become ready...
⌛ [kind-chart-testing] Waiting for CiliumEndpoint for pod cilium-test/client-7b7bf54b85-2dgcp to appear...
⌛ [kind-chart-testing] Waiting for CiliumEndpoint for pod cilium-test/client2-666976c95b-m9kl2 to appear...
⌛ [kind-chart-testing] Waiting for CiliumEndpoint for pod cilium-test/echo-other-node-697d5d69b7-4s2hv to appear...
⌛ [kind-chart-testing] Waiting for CiliumEndpoint for pod cilium-test/echo-same-node-7967996674-xsbkb to appear...
⌛ [kind-chart-testing] Waiting for Service cilium-test/echo-other-node to become ready...
⌛ [kind-chart-testing] Waiting for Service cilium-test/echo-same-node to become ready...
⌛ [kind-chart-testing] Waiting for NodePort 172.18.0.2:31609 (cilium-test/echo-other-node) to become ready...
⌛ [kind-chart-testing] Waiting for NodePort 172.18.0.2:31689 (cilium-test/echo-same-node) to become ready...
⌛ [kind-chart-testing] Waiting for NodePort 172.18.0.3:31689 (cilium-test/echo-same-node) to become ready...
⌛ [kind-chart-testing] Waiting for NodePort 172.18.0.3:31609 (cilium-test/echo-other-node) to become ready...
⌛ [kind-chart-testing] Waiting for Cilium pod kube-system/cilium-nkrrr to have all the pod IPs in eBPF ipcache...
⌛ [kind-chart-testing] Waiting for Cilium pod kube-system/cilium-zd6cf to have all the pod IPs in eBPF ipcache...
⌛ [kind-chart-testing] Waiting for pod cilium-test/client-7b7bf54b85-2dgcp to reach kube-dns service...
⌛ [kind-chart-testing] Waiting for pod cilium-test/client2-666976c95b-m9kl2 to reach kube-dns service...
🔭 Enabling Hubble telescope...
ℹ️  Hubble is OK, flows: 3955/8190
🏃 Running tests...

[=] Test [client-ingress]
..
[=] Test [client-egress]
....
[=] Test [to-fqdns]
...
[=] Test [no-policies]
.....
  [-] Scenario [no-policies/client-to-client]
  [.] Action [no-policies/client-to-client/ping-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/client2-666976c95b-m9kl2 (10.244.1.198:0)]
  📄 Following flows...
  [.] Action [no-policies/client-to-client/ping-1: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103:0)]
  📄 Following flows...
  [-] Scenario [no-policies/pod-to-world]
  [.] Action [no-policies/pod-to-world/https-to-cilium-io: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-io-https (cilium.io:443)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-world/http-to-cilium-io: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-io-http (cilium.io:80)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-world/http-to-jenkins-cilium: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> jenkins-cilium-io-http (jenkins.cilium.io:80)]
  📄 Following flows...
  ❌ command "curl -w %{local_ip}:%{local_port} -> %{remote_ip}:%{remote_port} = %{response_code} --silent --fail --show-error --connect-timeout 5 --output /dev/null http://jenkins.cilium.io:80" failed: command terminated with exit code 28
  📄 Flow logs for peer cilium-test/client-7b7bf54b85-2dgcp:
  ❓ [0] Jul 20 08:51:51.347: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:44694 from-endpoint FORWARDED (UDP)
  ❓ [1] Jul 20 08:51:51.347: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:44694 to-overlay FORWARDED (UDP)
  ❓ [2] Jul 20 08:51:51.636: cilium.io:80 -> cilium-test/client-7b7bf54b85-2dgcp:37332 from-host FORWARDED (TCP Flags: ACK, FIN)
  ❓ [3] Jul 20 08:51:51.636: cilium.io:80 -> cilium-test/client-7b7bf54b85-2dgcp:37332 to-endpoint FORWARDED (TCP Flags: ACK, FIN)
  ❓ [4] Jul 20 08:51:51.636: cilium-test/client-7b7bf54b85-2dgcp:37332 -> cilium.io:80 from-endpoint FORWARDED (TCP Flags: ACK)
  ❓ [5] Jul 20 08:51:51.636: cilium-test/client-7b7bf54b85-2dgcp:37332 -> cilium.io:80 to-stack FORWARDED (TCP Flags: ACK)
  ❓ [6] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [7] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [8] Jul 20 08:51:51.647: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 from-endpoint FORWARDED (UDP)
  ❓ [9] Jul 20 08:51:51.647: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 to-endpoint FORWARDED (UDP)
  ❓ [10] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [11] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [12] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 from-endpoint FORWARDED (UDP)
  ❓ [13] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 to-endpoint FORWARDED (UDP)
  ❓ [14] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [15] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [16] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [17] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [18] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 from-endpoint FORWARDED (UDP)
  ❓ [19] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 to-endpoint FORWARDED (UDP)
  ❓ [20] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 from-endpoint FORWARDED (UDP)
  ❓ [21] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 to-endpoint FORWARDED (UDP)
  ❓ [22] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [23] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [24] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [25] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [26] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 from-endpoint FORWARDED (UDP)
  ❓ [27] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 to-endpoint FORWARDED (UDP)
  ❓ [28] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 from-endpoint FORWARDED (UDP)
  ❓ [29] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 to-endpoint FORWARDED (UDP)
  ❓ [30] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 from-overlay FORWARDED (UDP)
  ❓ [31] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-endpoint FORWARDED (UDP)
  ❓ [32] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [33] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-overlay FORWARDED (UDP)
  ❓ [34] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 from-overlay FORWARDED (UDP)
  ❓ [35] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-endpoint FORWARDED (UDP)
  ❓ [36] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [37] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-overlay FORWARDED (UDP)
  ❓ [38] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 from-overlay FORWARDED (UDP)
  ❓ [39] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 to-endpoint FORWARDED (UDP)
  ❓ [40] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 from-endpoint FORWARDED (UDP)
  ❓ [41] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 to-overlay FORWARDED (UDP)
  ❓ [42] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [43] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-overlay FORWARDED (UDP)
  ❓ [44] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 from-overlay FORWARDED (UDP)
  ❓ [45] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-endpoint FORWARDED (UDP)
  
  📄 Flow logs for peer jenkins-cilium-io-http:
  ❓ [0] Jul 20 08:51:51.347: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:44694 from-endpoint FORWARDED (UDP)
  ❓ [1] Jul 20 08:51:51.347: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:44694 to-overlay FORWARDED (UDP)
  ❓ [2] Jul 20 08:51:51.636: cilium.io:80 -> cilium-test/client-7b7bf54b85-2dgcp:37332 from-host FORWARDED (TCP Flags: ACK, FIN)
  ❓ [3] Jul 20 08:51:51.636: cilium.io:80 -> cilium-test/client-7b7bf54b85-2dgcp:37332 to-endpoint FORWARDED (TCP Flags: ACK, FIN)
  ❓ [4] Jul 20 08:51:51.636: cilium-test/client-7b7bf54b85-2dgcp:37332 -> cilium.io:80 from-endpoint FORWARDED (TCP Flags: ACK)
  ❓ [5] Jul 20 08:51:51.636: cilium-test/client-7b7bf54b85-2dgcp:37332 -> cilium.io:80 to-stack FORWARDED (TCP Flags: ACK)
  ❓ [6] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [7] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [8] Jul 20 08:51:51.647: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 from-endpoint FORWARDED (UDP)
  ❓ [9] Jul 20 08:51:51.647: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 to-endpoint FORWARDED (UDP)
  ❓ [10] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [11] Jul 20 08:51:51.647: cilium-test/client-7b7bf54b85-2dgcp:58374 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [12] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 from-endpoint FORWARDED (UDP)
  ❓ [13] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:58374 to-endpoint FORWARDED (UDP)
  ❓ [14] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [15] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [16] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [17] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:43924 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [18] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 from-endpoint FORWARDED (UDP)
  ❓ [19] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 to-endpoint FORWARDED (UDP)
  ❓ [20] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 from-endpoint FORWARDED (UDP)
  ❓ [21] Jul 20 08:51:51.648: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:43924 to-endpoint FORWARDED (UDP)
  ❓ [22] Jul 20 08:51:51.648: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [23] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [24] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [25] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:50025 -> kube-system/coredns-f9fd979d6-nblkl:53 to-endpoint FORWARDED (UDP)
  ❓ [26] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 from-endpoint FORWARDED (UDP)
  ❓ [27] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 to-endpoint FORWARDED (UDP)
  ❓ [28] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 from-endpoint FORWARDED (UDP)
  ❓ [29] Jul 20 08:51:51.649: kube-system/coredns-f9fd979d6-nblkl:53 -> cilium-test/client-7b7bf54b85-2dgcp:50025 to-endpoint FORWARDED (UDP)
  ❓ [30] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 from-overlay FORWARDED (UDP)
  ❓ [31] Jul 20 08:51:51.649: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-endpoint FORWARDED (UDP)
  ❓ [32] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [33] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-overlay FORWARDED (UDP)
  ❓ [34] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 from-overlay FORWARDED (UDP)
  ❓ [35] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-endpoint FORWARDED (UDP)
  ❓ [36] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [37] Jul 20 08:51:51.650: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-overlay FORWARDED (UDP)
  ❓ [38] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 from-overlay FORWARDED (UDP)
  ❓ [39] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 to-endpoint FORWARDED (UDP)
  ❓ [40] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 from-endpoint FORWARDED (UDP)
  ❓ [41] Jul 20 08:51:51.659: kube-system/coredns-f9fd979d6-nr4rh:53 -> cilium-test/client-7b7bf54b85-2dgcp:46156 to-overlay FORWARDED (UDP)
  ❓ [42] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/kube-dns:53 from-endpoint FORWARDED (UDP)
  ❓ [43] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-overlay FORWARDED (UDP)
  ❓ [44] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 from-overlay FORWARDED (UDP)
  ❓ [45] Jul 20 08:51:54.151: cilium-test/client-7b7bf54b85-2dgcp:46156 -> kube-system/coredns-f9fd979d6-nr4rh:53 to-endpoint FORWARDED (UDP)
  
  [-] Scenario [no-policies/pod-to-cidr]
  [.] Action [no-policies/pod-to-cidr/cloudflare-1001-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cloudflare-1001 (1.0.0.1:80)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-cidr/cloudflare-1001-1: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cloudflare-1001 (1.0.0.1:80)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-cidr/cloudflare-1111-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cloudflare-1111 (1.1.1.1:80)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-cidr/cloudflare-1111-1: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cloudflare-1111 (1.1.1.1:80)]
  📄 Following flows...
  [-] Scenario [no-policies/pod-to-pod]
  [.] Action [no-policies/pod-to-pod/curl-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-other-node-697d5d69b7-4s2hv (10.244.0.48:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-pod/curl-1: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-same-node-7967996674-xsbkb (10.244.1.85:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-pod/curl-2: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-other-node-697d5d69b7-4s2hv (10.244.0.48:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-pod/curl-3: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-same-node-7967996674-xsbkb (10.244.1.85:8080)]
  📄 Following flows...
  [-] Scenario [no-policies/pod-to-remote-nodeport]
  [.] Action [no-policies/pod-to-remote-nodeport/curl-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-other-node (echo-other-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-remote-nodeport/curl-1: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-same-node (echo-same-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-remote-nodeport/curl-2: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-other-node (echo-other-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-remote-nodeport/curl-3: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-same-node (echo-same-node:8080)]
  📄 Following flows...
  [-] Scenario [no-policies/pod-to-local-nodeport]
  [.] Action [no-policies/pod-to-local-nodeport/curl-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-other-node (echo-other-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-local-nodeport/curl-1: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-same-node (echo-same-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-local-nodeport/curl-2: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-other-node (echo-other-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-local-nodeport/curl-3: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-same-node (echo-same-node:8080)]
  📄 Following flows...
  [-] Scenario [no-policies/pod-to-host]
  [.] Action [no-policies/pod-to-host/ping-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> 172.18.0.2 (172.18.0.2:0)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-host/ping-1: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> 172.18.0.3 (172.18.0.3:0)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-host/ping-2: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> 172.18.0.2 (172.18.0.2:0)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-host/ping-3: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> 172.18.0.3 (172.18.0.3:0)]
  📄 Following flows...
  [-] Scenario [no-policies/pod-to-external-workload]
  [-] Scenario [no-policies/pod-to-service]
  [.] Action [no-policies/pod-to-service/curl-0: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-other-node (echo-other-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-service/curl-1: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> cilium-test/echo-same-node (echo-same-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-service/curl-2: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-other-node (echo-other-node:8080)]
  📄 Following flows...
  [.] Action [no-policies/pod-to-service/curl-3: cilium-test/client2-666976c95b-m9kl2 (10.244.1.198) -> cilium-test/echo-same-node (echo-same-node:8080)]
  📄 Following flows...

[=] Test [allow-all]
.........................
[=] Test [dns-only]
.......
[=] Test [echo-ingress]
....
[=] Test [to-entities-world]
...
[=] Test [to-cidr-1111]

....
📋 Test Report
❌ 1/9 tests failed (1/81 actions), 0 tests skipped, 0 scenarios skipped:
Test [no-policies]:
  ❌ no-policies/pod-to-world/http-to-jenkins-cilium: cilium-test/client-7b7bf54b85-2dgcp (10.244.1.103) -> jenkins-cilium-io-http (jenkins.cilium.io:80)
Error: Connectivity test failed: 1 tests failed
job
sysdump
About this issue

Original URL
State: closed
Created 3 years ago
Comments: 23 (19 by maintainers)
Commits related to this issue

conn-tests: move away from jenkins url as reported here: https://github.com/cilium/cilium/issues/16938#issuecomment-903841950 the usage of the jenkins url causes our tests to flake. in this patch we... — committed to cilium/cilium-cli by ldelossa 3 years ago
conn-tests: move away from jenkins url as reported here: https://github.com/cilium/cilium/issues/16938#issuecomment-903841950 the usage of the jenkins url causes our tests to flake. in this patch we... — committed to cilium/cilium-cli by ldelossa 3 years ago
workflows: re-enable eks ipsec tests This commit re-enables the EKS ipsec tests (ci-eks) after running over 20 times without hitting any issues. Closes: #16938 Signed-off-by: Nikolay Aleksandrov <ni... — committed to NikAleksandrov/cilium by deleted user 2 years ago
Most upvoted comments

@borkmann curious why you think this is related to policy? My understanding of the problem right now is that after a full successful CI run, we redeploy Cilium with encryption enabled and then sometimes there is some lingering state which causes connectivity issues with a range of tests both with and without policy, inside and outside the cluster.
joestringer on Dec 6, 2021
OK, I was under the impression that these were the same issues. My latest report definitely matches the issue description here where there’s lots of DNS traffic going back and forth but the app is never able to figure out the IP to initiate the connection to the remote server. More digging required.
joestringer on Sep 28, 2021
Yes, they do, usually as one of the last traces. See https://github.com/cilium/cilium-cli/issues/367#issuecomment-920218323.
pchaigno on Sep 28, 2021