Replacing iptables with eBPF in Kubernetes with Cilium