Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -204,6 +204,7 @@ We've also added more feedback into the UI to keep you informed on the progress
This occurs because some Calico images are missing the required nftables binaries and incorrectly rely on legacy iptables modules that have been removed from newer operating systems.
As a workaround, ensure your host platform has legacy iptables kernel modules installed and loaded until a full fix is delivered in an upcoming patch release.
* Kibana attempts external API calls that are blocked by network policies related to Elastic Fleet. Errors will show in the logs. There is no further impact.
* Felix panics when WAF/L7 features are enabled in eBPF mode.
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The known issue lacks important context for users encountering this problem. Consider adding details about: 1) what triggers this panic (specific configuration or conditions), 2) the impact on system functionality, and 3) any available workarounds or recommended actions until a fix is available. This would align with the level of detail provided in the preceding known issue about nftables binaries.

Suggested change
* Felix panics when WAF/L7 features are enabled in eBPF mode.
* Felix can panic on nodes that run the eBPF data plane when WAF or other L7 features (such as L7 logging) are enabled.
This causes Felix to restart on the affected nodes, which can delay or temporarily interrupt the programming of network policy and dataplane state.
As a workaround until a fix is available, avoid enabling WAF/L7 features on clusters using the eBPF data plane, or disable those features on affected nodes and use non-L7 policies only.

Copilot uses AI. Check for mistakes.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 @sabags @rene-dekker Can we add more information here?

Copy link
Collaborator Author

@sabags sabags Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ctauchen : do you think the copilot suggestion is better here ?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it's always good to have those elements in a known issue. Conditions for problem, description of workaround, and indicate whether this is due to be fixed.


#### Upgrading
To update an existing installation of Calico Enterprise 3.22, see [Install a patch release](../getting-started/manifest-archive.mdx).
Expand Down