projectcalico/calico

View on GitHub

Cloud native networking and network security

Stars: 7.4k
Forks: 1.6k
Open beginner issues: 0
Indexed issues: 95
Avg merge: 1d 13h
Merged PRs (30d): 297

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

95 open issues indexed

Felix QoS controls: `bwcali*` IFB devices leak when a pod is deleted while Felix is not running Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#13986 · Opened Sep 18, 2026
kube-controllers still logs `unknown field "status"` every 10s on v3.32.2 — from EnsureInitialized/ensureTierExists, not the tier controller Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

projectcalico/calico#13984 · Opened Sep 18, 2026
Cross-node pod traffic silently dropped on Ubuntu 26.04 (kernel 7.0.0-31-generic) — IPIP, VXLAN, and no-encap BGP all fail; host-to-host works Open

kind/support

Difficulty 5/5 Over a week Newbie friendliness 25/100

projectcalico/calico#13960 · 3 comments · Opened Sep 17, 2026
FelixConfiguration BPFConntrackTimeout validation: Pattern has ReDoS risk Open

Difficulty 3/5 1-2 days Newbie friendliness 67/100

projectcalico/calico#13943 · Opened Sep 16, 2026
Policy name migrator looks up a DaemonSet named `calico-node`, which does not exist in `manifests/canal.yaml` Open

impact/high kind/bug likelihood/low

Difficulty 3/5 1-2 days Newbie friendliness 78/100

projectcalico/calico#13912 · 1 comment · Opened Sep 14, 2026
Bug: CNI plugin hard-fails with ENOENT on node boot — no retry during calico-node startup window Open

kind/support

Difficulty 3/5 1-2 days Newbie friendliness 72/100

projectcalico/calico#13884 · 2 comments · Opened Sep 11, 2026
Duplicate IP assignment after calico-node restart during pod sandbox recreation. Open

kind/support

Difficulty 5/5 Over a week Newbie friendliness 38/100

projectcalico/calico#13858 · 3 comments · Opened Sep 10, 2026
Update envoy-gateway to version >= 1.9.0 Open

projectcalico/calico#13833 · 1 comment · 1 reaction · 1 assignee · Opened Sep 9, 2026
calico-node panics on s390x (v3.32.2): RemoveConnectTimeLoadBalancer unconditionally calls libbpf_stub, unrelated to bpfEnabled Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

projectcalico/calico#13828 · Opened Sep 9, 2026
Tigera operator (post-migration) fails to work if some pods have ips not in cluster pod CIDR Open

help wanted kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#13704 · Opened Aug 31, 2026
Feature request: ability to disable pod-security labels added by tigera/operator Open

help wanted kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

projectcalico/calico#13703 · Opened Aug 31, 2026
Propose Windows operator updates Open

kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

projectcalico/calico#13702 · 1 comment · Opened Aug 31, 2026
Cannot add custom network policies to Calico components Open

kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

projectcalico/calico#13700 · Opened Aug 31, 2026
Allow configuring IP family policy for Calico services Open

kind/enhancement

Difficulty 5/5 Over a week Newbie friendliness 38/100

projectcalico/calico#13699 · Opened Aug 31, 2026
During version upgrades, Typha and calico-node roll concurrently — is readiness gating between them intentional? Open

kind/support

Difficulty 5/5 Over a week Newbie friendliness 35/100

projectcalico/calico#13698 · 1 comment · Opened Aug 31, 2026
Issue when using helm v4 Open

kind/bug

Difficulty 5/5 Over a week Newbie friendliness 35/100

projectcalico/calico#13697 · Opened Aug 31, 2026
GatewayAPI reconciliation temporarily removes topology injector caBundle every five minutes Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

projectcalico/calico#13695 · Opened Aug 31, 2026
Goldmane hard-codes FELIX_FLOWLOGSFLUSHINTERVAL=15, preventing FelixConfiguration override Open

kind/enhancement

projectcalico/calico#13694 · 3 comments · 1 assignee · Opened Aug 31, 2026
Operator controllers continuously conflict on shared imagePullSecret in calico-system (ownerReference thrash) on v1.42.5 Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

projectcalico/calico#13693 · Opened Aug 31, 2026
`calico-node` fails to start on kernels without `CONFIG_SECURITYFS` (`mkdir /sys/kernel/security: operation not permitted`) Open

area/bpf

projectcalico/calico#13681 · 1 assignee · Opened Aug 30, 2026
eBPF: ICMP errors for a service VIP are only delivered if they land on the node holding the conntrack entry Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#13667 · Opened Aug 27, 2026
GlobalNetworkPolicy: empty `nets: []` list unexpectedly matches all traffic (behaves as "match all") Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

projectcalico/calico#13616 · 1 comment · Opened Aug 24, 2026
emang Open

Difficulty 5/5 Over a week Newbie friendliness 1/100

projectcalico/calico#13612 · Opened Aug 22, 2026
Packet handling for non-existing pods with eBPF Open

stale

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#13570 · 2 comments · Opened Aug 19, 2026
calico-node fails when ip_tables modules are not loaded Open

projectcalico/calico#13499 · 3 comments · 1 assignee · Opened Aug 12, 2026
ztunnel/calico-node pods accumulate as ContainerStatusUnknown after node reboot (missing tolerationSeconds) Open

kind/support stale

Difficulty 3/5 1-2 days Newbie friendliness 68/100

projectcalico/calico#13490 · 5 comments · Opened Aug 11, 2026
Felix (calico-node pod) crashes in nftables mode with 0.0.0.0/0 in a NetworkSet Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

projectcalico/calico#13477 · 3 comments · 5 reactions · Opened Aug 10, 2026
Unable to scrape calico-kube-controllers from external Prometheus Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#13370 · 3 comments · Opened Jul 29, 2026
Whisker didn't record hostendpoint connection Open

stale

projectcalico/calico#13249 · 2 comments · 1 assignee · Opened Jul 18, 2026
eBPF: reply to a natively-routed ingress flow is emitted on the ingress interface as a raw frame (no FIB lookup, no L2 rewrite, dst MAC ee:ee:ee:ee:ee:ee) when the reply route points to vxlan.calico — regression between 3.29.2 and 3.31.3 Open

area/bpf

projectcalico/calico#13191 · 2 comments · 1 assignee · Opened Jul 10, 2026
calico/istio-ztunnel arm64 image does not exec Open

impact/high kind/bug likelihood/low

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#13183 · 2 comments · Opened Jul 9, 2026
Community forum URL returns an unreachable page Open

stale

Difficulty 3/5 1-2 days Newbie friendliness 65/100

projectcalico/calico#13141 · 5 comments · Opened Jul 6, 2026
Support anycast failover for LoadBalancer VIPs when local endpoints are unavailable Open

kind/enhancement

projectcalico/calico#13136 · 2 comments · 1 assignee · Opened Jul 3, 2026
Re-render breaks pod→CoreDNS cluster-wide until calico-node restart (iptables + nftables dataplanes, Canal/kdd, v3.31.4) Open

projectcalico/calico#13132 · 4 comments · 1 assignee · Opened Jul 2, 2026
Calico delegate breaks after multus cniVersion bumped to 1.1.0 Open

kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

projectcalico/calico#12965 · 14 comments · Opened Jun 12, 2026
Operator does not work in rootless container-based cluster Open

impact/high kind/bug likelihood/low

Difficulty 4/5 3-5 days Newbie friendliness 48/100

projectcalico/calico#12886 · 7 comments · Opened Jun 1, 2026
"v" prefix on version tags of OCI charts prevents Helm from detecting the latest version Open

area/helm area/release impact/high kind/bug likelihood/high

projectcalico/calico#12826 · 5 comments · 1 assignee · Opened May 25, 2026
Tigera operator Helm chart - add option to enable experimental channel for ClusterNetworkPolicy CRD Open

kind/enhancement

Difficulty 3/5 1-2 days Newbie friendliness 48/100

projectcalico/calico#12821 · 2 comments · Opened May 22, 2026
Nodes need reboot after ipvs->iptables->ebpf to work properly Open

area/bpf kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

projectcalico/calico#12476 · 16 comments · Opened Apr 15, 2026
Stale /var/lib/calico/nodename causes duplicate Pod IPs via incorrect IPAM bookkeeping and subsequent leak GC Open

impact/high kind/bug likelihood/low triage/eternal

projectcalico/calico#12257 · 2 comments · 1 assignee · Opened Mar 26, 2026
Calico eBPF completely kills node upon netplan apply or any other systemd-networkd triggers Open

area/bpf impact/high kind/bug

projectcalico/calico#12253 · 1 comment · 1 assignee · Opened Mar 26, 2026
Add major version suffix `/v3` into the module path Open

kind/enhancement

projectcalico/calico#11852 · 3 comments · 1 assignee · Opened Feb 15, 2026
Allow configuring calico-windows-node readiness/liveness probes as HTTP instead of exec when deployed via operator Open

help wanted kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

projectcalico/calico#11825 · 4 comments · Opened Feb 11, 2026
Add Windows Server 2025 Support Open

area/windows kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 42/100

projectcalico/calico#11691 · 7 comments · 2 reactions · Opened Jan 20, 2026
Create health check for whisker-backend Open

area/whisker help wanted kind/enhancement

Difficulty 3/5 1-2 days Newbie friendliness 48/100

projectcalico/calico#11547 · 1 comment · 1 reaction · Opened Dec 12, 2025
calico-typha fails to start when encountering malformed network policies Open

kind/enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

projectcalico/calico#11529 · 2 comments · Opened Dec 11, 2025
Race between BGP and eBPF dataplane causes traffic drops with externalTrafficPolicy=Local Open

area/bpf help wanted impact/high kind/bug likelihood/low

Difficulty 5/5 Over a week Newbie friendliness 48/100

projectcalico/calico#11523 · 4 comments · Opened Dec 10, 2025
[Build] Use host process containers base image for node-windows Open

area/windows help wanted kind/enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

projectcalico/calico#11350 · 3 comments · 1 reaction · Opened Nov 8, 2025
[Feature Request] Optional conntrack flush on NetworkPolicy update (Felix) Open

kind/enhancement triage/eternal

Difficulty 5/5 Over a week Newbie friendliness 35/100

projectcalico/calico#11334 · 2 comments · 1 reaction · Opened Nov 6, 2025
Taint kubernetes when NetworkUnavailable=true Open

kind/enhancement

projectcalico/calico#11331 · 5 comments · 6 reactions · 1 assignee · Opened Nov 6, 2025

projectcalico/calico

Get new issues in your inbox