Illumio Segmentation for Containers

E-135626

Blocked flows to Kubelink missing UUIDs

C-VEN was not populating some workload UUIDs for blocked inbound flows to Kubelink, causing issues with traffic visualization. This issue was resolved by including the UUIDs for blocked traffic.

E-135087

Helm chart schema validation failing when storage.sizeGi exceeds 10

Configuring storage.sizeGi in Helm chart to greater than 10 failed schema validation and caused an error. This issue was resolved by increasing the max storage.sizeGi to 20.

E-134047

Illumio storage pod restarting when out of memory

The Illumio storage pod restarted when it ran out of memory or during storage compaction. This issue is resolved by pausing etcd requests during defragmentation.

E-130209

Silent Illumio rule removal

The tamper detection on the C-VEN was delayed when host workloads were rapidly re-applied, causing silent Illumio rule removal. This was resolved by asynchronously getting firewall tampering notifications as soon as possible through the Linux kernel tracefs virtual sub-system the same way that the VEN does.