Issues

• Guardian health server binds :8080 and collides with the Voltron proxy

  projectcalico/calico#14341 · Filter by author denislemire opened on Oct 19, 2026

• Feature request: Zone-by-zone rollout of Calico upgrades and configuration changes (Installation, BGPConfiguration, IPPool)

  kind/enhancement
  Feature

  projectcalico/calico#14322 · Filter by author jfpucheu opened on Oct 18, 2026
  1

• Support BGP SHA authentication

  projectcalico/calico#14320 · Filter by author ar406 opened on Oct 17, 2026

• calico-node's bundled portmap CNI plugin is outdated and vulnerable with nftables backend

  projectcalico/calico#14303 · Filter by author vladonutu opened on Oct 15, 2026

• eBPF conntrack treats recycled NATReverse TCP SYNs as established

  area/bpf
  Bug

  projectcalico/calico#14184 · Filter by author sergeimonakhov opened on Oct 6, 2026

• tigera-operator chart: add a value to disable Calico Ingress Gateway (Gateway API / Envoy Gateway) and its RBAC

  projectcalico/calico#14172 · Filter by author haskjold opened on Oct 6, 2026

• Unclear how to configure Istio trace providers

  projectcalico/calico#14152 · Filter by author sshambar opened on Oct 2, 2026

• Request rebuild of calico/node v3.31.x on updated UBI8 to clear CVE-2025-5278, CVE-2026-41991, CVE-2026-41992

  projectcalico/calico#14123 · Filter by author Rangudu opened on Oct 1, 2026

• IPv6 pod traffic is dropped by the nftables RPF check when WireGuard IPv6 is enabled (Linux 7.1+)

  projectcalico/calico#14122 · Filter by author mia-mouret opened on Oct 1, 2026

• Helm chart 3.32.2 upgrade issue on EKS 1.36

  impact/highkind/buglikelihood/high
  projectcalico/calico#14019 · Filter by author joshuaganger opened on Sep 22, 2026

• felix nftables (Auto): bundled nft v1.1.0 in hardened-calico v3.32.1 segfaults on arp-family (calico-arp) transactions — retry loop wrote ~370GB of core dumps

  stale
  projectcalico/calico#13987 · Filter by author OutsrYingq opened on Sep 19, 2026
  1

• Felix QoS controls: bwcali* IFB devices leak when a pod is deleted while Felix is not running

  stale
  projectcalico/calico#13986 · Filter by author pkossyfas opened on Sep 18, 2026
  1

• FelixConfiguration BPFConntrackTimeout validation: Pattern has ReDoS risk

  stale
  projectcalico/calico#13943 · Filter by author data-transformation-lab opened on Sep 16, 2026
  1

• Duplicate IP assignment after calico-node restart during pod sandbox recreation.

  kind/supportstale
  projectcalico/calico#13858 · Filter by author AshishAgr31 opened on Sep 10, 2026
  4

• Tigera operator (post-migration) fails to work if some pods have ips not in cluster pod CIDR

  help wantedkind/enhancement
  projectcalico/calico#13704 · Filter by author caseydavenport opened on Aug 31, 2026

• Feature request: ability to disable pod-security labels added by tigera/operator

  help wantedkind/enhancement
  projectcalico/calico#13703 · Filter by author caseydavenport opened on Aug 31, 2026

• Propose Windows operator updates

  kind/enhancement
  projectcalico/calico#13702 · Filter by author caseydavenport opened on Aug 31, 2026
  1

• Cannot add custom network policies to Calico components

  kind/enhancement
  projectcalico/calico#13700 · Filter by author caseydavenport opened on Aug 31, 2026

• Allow configuring IP family policy for Calico services

  kind/enhancement
  projectcalico/calico#13699 · Filter by author caseydavenport opened on Aug 31, 2026

• Issue when using helm v4

  kind/bug
  projectcalico/calico#13697 · Filter by author caseydavenport opened on Aug 31, 2026

• GatewayAPI reconciliation temporarily removes topology injector caBundle every five minutes

  area/operatorimpact/highkind/buglikelihood/high
  projectcalico/calico#13695 · Filter by author caseydavenport opened on Aug 31, 2026
  1

• Goldmane hard-codes FELIX_FLOWLOGSFLUSHINTERVAL=15, preventing FelixConfiguration override

  kind/enhancement
  projectcalico/calico#13694 · Filter by author caseydavenport opened on Aug 31, 2026
  3

  

• Operator controllers continuously conflict on shared imagePullSecret in calico-system (ownerReference thrash) on v1.42.5

  area/operatorimpact/lowkind/buglikelihood/low
  projectcalico/calico#13693 · Filter by author caseydavenport opened on Aug 31, 2026
  1

• calico-node fails when ip_tables modules are not loaded

  projectcalico/calico#13499 · Filter by author sshambar opened on Aug 12, 2026
  4

  

• Felix (calico-node pod) crashes in nftables mode with 0.0.0.0/0 in a NetworkSet

  projectcalico/calico#13477 · Filter by author timp87 opened on Aug 10, 2026
  5