Skip to main content

Browse the archive

https://github.com/cilium/cilium
09 April 2024, 21:14:05 UTC
sort by:
Revision Author Date Message Commit Date
c31ac13 Thomas Graf 08 March 2018, 20:15:13 UTC 0.13.13 release 08 March 2018, 20:15:13 UTC
a8a9ccd Thomas Graf 08 March 2018, 17:26:06 UTC Prepare for 1.0.0-rc7 release Signed-off-by: Thomas Graf <thomas@cilium.io> 08 March 2018, 18:55:03 UTC
5b3fac5 Eloy Coto 08 March 2018, 08:14:45 UTC Ginkgo: Updating docker-compose base image to cilium/cilium-builder Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 08 March 2018, 16:40:33 UTC
9412a28 André Martins 06 March 2018, 14:39:33 UTC test: check for deadlock in previous cilium instances Since the deadlock detector panics if a deadlock is detected, we need to check for the logs in the previous cilium instance. Signed-off-by: André Martins <andre@cilium.io> 08 March 2018, 16:18:59 UTC
966daa3 Eloy Coto 06 March 2018, 15:27:51 UTC GSG: Added GPRC examples on ginkgo testing Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 08 March 2018, 16:16:01 UTC
e233813 Eloy Coto 06 March 2018, 14:03:59 UTC Ginkgo: Fixed WaitCleanAllTerminatingEndpoints Due the test-flake I discovered that the termination helper didn't work as expected, and the status.phase is not represent at all (https://github.com/kubernetes/kubernetes/issues/49387) Issue: ``` vagrant@k8s1:~$ kubectl delete pod testds-w7prl pod "testds-w7prl" deleted vagrant@k8s1:~$ kubectl get pods NAME READY STATUS RESTARTS AGE netcatds-bhxv4 1/1 Running 0 5m netcatds-zpzzl 1/1 Running 0 5m testclient-8qx59 1/1 Running 0 1m testclient-r9xmm 1/1 Running 0 1m testds-fwss5 1/1 Running 0 32s testds-w7prl 0/1 Terminating 0 1m vagrant@k8s1:~$ kubectl get pods -o "jsonpath='{.items[*].status.phase}'" 'Running Running Running Running^C vagrant@k8s1:~$ kubectl get pods NAME READY STATUS RESTARTS AGE netcatds-bhxv4 1/1 Running 0 5m netcatds-zpzzl 1/1 Running 0 5m testclient-8qx59 1/1 Running 0 1m testclient-r9xmm 1/1 Running 0 1m testds-fwss5 1/1 Running 0 40s testds-w7prl 0/1 Terminating 0 1m vagrant@k8s1:~$ ``` Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 08 March 2018, 15:46:21 UTC
ff1b3c1 Eloy Coto 04 March 2018, 19:54:24 UTC Nightly: Fix some typos Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 08 March 2018, 15:46:21 UTC
8e82203 Eloy Coto 02 March 2018, 19:12:13 UTC Nightly: Added TCP Keepalive test over tunnel - Added TCP keepalive over Vxlan without policy and with L7 policy. - Added ExpectContains helper in resCmd Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 08 March 2018, 15:46:21 UTC
657989d Ian Vernon 07 March 2018, 20:52:22 UTC test/config: enable timestamps for Ginkgo logs This will make it easier to correlate the Ginkgo test logs with the Cilium logs. Signed-off by: Ian Vernon <ian@cilium.io> 08 March 2018, 15:40:52 UTC
bd2264c Ian Vernon 08 March 2018, 04:55:17 UTC pkg/endpoint: Don't return error on update while regenerating This restores the state to before #3043 in terms of not returning an error if an endpoint is patched while being regenerated. It is an workaround fix to avoid further CI failures. The long term fix is being developed via GH-3058 Signed-off by: Ian Vernon <ian@cilium.io> Signed-off-by: Thomas Graf <thomas@cilium.io> 08 March 2018, 15:28:03 UTC
c7ba096 Manali Bhutiyani 07 March 2018, 21:56:29 UTC Envoy: Delete older cilium-envoy.log and rename the log to envoy.log We need to do a one-time cleanup of cilium-envoy.log on startup and also rename the new file following log-rotation correctly to envoy.log. This will ensure that users get their claimed disk space back. Fixes: #3046 Signed-off-by: Manali Bhutiyani <manali@covalent.io> 08 March 2018, 11:25:04 UTC
850615c Thomas Graf 07 March 2018, 22:47:40 UTC bpf: Move calls map to temporary location and remove after filter replace Removing a BPF map cause it to lose all state immediately. Current code is removing the tail call map just before replacing the filter which could lead to a short race window where tail calls would fail in the old program just before it is replaced with the new program. Fixes: 95a2c8aea ("bpf: Remove old calls map when inserting endpoint programs") Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> 08 March 2018, 11:11:51 UTC
cb5e473 Jarno Rajahalme 07 March 2018, 23:24:13 UTC Makefile: Update filtering for generated Envoy API go files. Update the filters in Makefile to match the current directory structure for generated Envoy API go-files. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 08 March 2018, 02:16:45 UTC
8605e41 André Martins 08 March 2018, 01:16:09 UTC k8s/daemonset: add update verb to customresourcedefinitions Signed-off-by: André Martins <andre@cilium.io> 08 March 2018, 01:22:39 UTC
499e68f Ian Vernon 07 March 2018, 20:10:06 UTC pkg/endpoint: always set state to waiting-to-regenerate upon endpoint Update Not setting it to this state would cause endpoints to go into not-ready state. Signed-off by: Ian Vernon <ian@cilium.io> 08 March 2018, 01:20:47 UTC
08ee538 Jarno Rajahalme 07 March 2018, 19:44:09 UTC daemon: Add new '--envoy-log' command line option. So far the Envoy logs were written to the state directory (/var/run/cilium/cilium-envoy.log), the file system of which was easily filled with Envoy debug logs, especially if something went wrong. Add a new cilium agent command line option to specify where Envoy logs shoulld be written to. By default this will be "/var/log/cilium-envoy.log", which is good for production runs. For testing this default may need to be overridden with an explicit commmand line option. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 07 March 2018, 23:03:47 UTC
49277bb André Martins 06 March 2018, 15:58:34 UTC pkg/k8s: fix CRD update If the CRD spec validation was different, the CRD was being updated but its labels, which contains the CRD version, were not being updated. Signed-off-by: André Martins <andre@cilium.io> 07 March 2018, 19:22:04 UTC
4cb0517 Thomas Graf 07 March 2018, 17:09:37 UTC bpf: Remove policy maps of programs loaded in init.sh This allows to change the format of the maps across restarts of the agent. This fixes an upgrade bug introduced in commit 7823859. Signed-off-by: Thomas Graf <thomas@cilium.io> 07 March 2018, 18:26:35 UTC
ae14976 Eloy Coto 05 March 2018, 11:28:58 UTC Test: Updated default kubernetes version to 1.9 Updated default kubernetes version to 1.9 in test Added kubernetes 1.8 in test-missed-kubernetes Fix #2948 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 07 March 2018, 17:31:03 UTC
a94e914 Ian Vernon 06 March 2018, 17:26:44 UTC test: get debuginfo and bugtool output when Ginkgo tests fail Save output of these commands to directory which is gathered up by Jenkins. Signed-off by: Ian Vernon <ian@cilium.io> 07 March 2018, 15:17:57 UTC
8dac290 Ian Vernon 06 March 2018, 17:24:11 UTC cmd: add `cilium endpoint log` output for each running endpoint Get log of state transitions for each endpoint as part of debugtool. Signed-off by: Ian Vernon <ian@cilium.io> 07 March 2018, 15:17:57 UTC
5e007dd Thomas Graf 07 March 2018, 02:51:30 UTC agent: Fix manual endpoint regeneration The command `cilium endpoint regenerate` was broken Signed-off-by: Thomas Graf <thomas@cilium.io> 07 March 2018, 15:17:22 UTC
39fc216 Jarno Rajahalme 07 March 2018, 02:17:32 UTC envoy: Adjust log levels to avoid excessive logging. Only enable Envoy debug level if cilium-agent option "--debug-verbose flow" is set. Enable Envoy "trace" log level if "--debug-verbose envoy" is set. Adjust the log levels of cilium envoy filters to reduce logging. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 07 March 2018, 03:45:01 UTC
cf3c6be Joe Stringer 06 March 2018, 22:20:20 UTC endpoint: Allow configuration of LB_DEBUG This option enables more verbose debug tracing from the datapath specifically in the area of service/loadbalancer handling. Signed-off-by: Joe Stringer <joe@covalent.io> 07 March 2018, 01:45:34 UTC
cdf29f5 Joe Stringer 06 March 2018, 22:16:31 UTC bpf: Fix LB_DEBUG option Signed-off-by: Joe Stringer <joe@covalent.io> 07 March 2018, 01:45:34 UTC
50be4a1 Joe Stringer 06 March 2018, 22:14:33 UTC bpf: Add SKIP_DEBUG option By default, compile with DEBUG=1 but also test builds without DEBUG option. While we're at it, roll LB_DEBUG into the same default configuration. Signed-off-by: Joe Stringer <joe@covalent.io> 07 March 2018, 01:45:34 UTC
08222d5 Manali Bhutiyani 06 March 2018, 22:19:00 UTC Add logger.Close and make the definition more local Fixes Issue: #3033 Signed-off-by: Manali Bhutiyani <manali@covalent.io> 06 March 2018, 23:41:18 UTC
c5c014d Manali Bhutiyani 06 March 2018, 20:48:37 UTC Support log rotation for envoy log This change uses lumbarjack package to log rotate the cilium-envoy.log file Fixes Issue: #3033 Signed-off-by: Manali Bhutiyani <manali@covalent.io> 06 March 2018, 23:41:18 UTC
df9e4d1 Ian Vernon 23 February 2018, 05:12:29 UTC Vagrantfile: do not run unit tests by default in bash-build As part of phasing out bash-script based build, to reduce build time, do not run "make tests". This is covered by the Ginkgo test suite now. Signed-off by: Ian Vernon <ian@cilium.io> 06 March 2018, 23:04:15 UTC
af41906 Ian Vernon 23 February 2018, 05:07:29 UTC ginkgo.Jenkinsfile: add Envoy Tests stage Add stage to test run in parallel which runs Envoy unit tests Signed-off by: Ian Vernon <ian@cilium.io> 06 March 2018, 23:04:15 UTC
3cabc15 Eloy Coto 06 March 2018, 09:05:51 UTC Added protoc-gen-validate in test Vagrantfile - CleanWorkspace in Jenkins Nightly Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 06 March 2018, 17:34:02 UTC
ef4242e Thomas Graf 06 March 2018, 12:36:35 UTC bugtool: Retrieve current and previous version of pod logs Fixes: #2671 Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 17:33:41 UTC
98a3fa7 Thomas Graf 06 March 2018, 12:30:03 UTC cilium: Remove bugtool subcommand from client binary We already provide the bugtool as separate binary, do not include it as subcommand to the main client binary. This keeps the client binary smaller. Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 17:33:41 UTC
bd02608 Thomas Graf 06 March 2018, 12:21:13 UTC bugtool: Generate own command reference Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 17:33:41 UTC
3af87a7 Thomas Graf 06 March 2018, 12:13:19 UTC bugtool: Cleanup usage text Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 17:33:41 UTC
02553c4 Thomas Graf 06 March 2018, 11:30:48 UTC bugtool: Add kubectl describe pod to collected information Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 17:33:41 UTC
6549997 Thomas Graf 06 March 2018, 11:54:54 UTC Documentation: Document requirement for protoc-gen-validate Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 13:43:37 UTC
a714180 Thomas Graf 06 March 2018, 02:59:32 UTC examples/getting-started: Pull cilium binaries from releases.cilium.io Reported-by: Ranga Iyengar Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 13:31:57 UTC
b0ba543 Thomas Graf 06 March 2018, 02:18:49 UTC examples/getting-started: Fix failure to install docker It was no longer possible to install the docker runtime. Bump to Ubuntu 17.10 as the default image and remove the multi node complexity Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 13:31:57 UTC
5792bad Romain Lenglet 01 March 2018, 23:21:04 UTC envoy: Fix NPDS protocol message validation Remove DirectionNetworkPolicy message. Relax field validation constraints. Validate every NetworkPolicy message after conversion before sending it to Envoy, to prevent validation errors within Envoy. Signed-off-by: Romain Lenglet <romain@covalent.io> 06 March 2018, 06:21:42 UTC
1218c64 Romain Lenglet 02 March 2018, 01:47:20 UTC envoy: Generate protobuf validation code for Cilium's xDS API Install protoc-gen-validate into $PATH into Vagrant VM. Use protoc-gen-validate to generate validation code when generating Cilium's xDS protocol buffers code. Signed-off-by: Romain Lenglet <romain@covalent.io> 06 March 2018, 06:21:42 UTC
42aaeed Thomas Graf 05 March 2018, 14:51:35 UTC etcd: Treat etcd watcher errors by restarting the watcher etcd does not support watching on a compacted revision and will error out. Do a fresh get on the latest revision and restart the watcher. In order to continue maintaining the proper order of events, a local cache is introduced. The ListDone signal is only emitted once at the beginning. On ReList, deletion events are sent for keys which can no longer be found. Fixes: #3010 Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 03:28:45 UTC
47e01eb Thomas Graf 05 March 2018, 22:38:28 UTC bpf: Retry opening map after initial error Current code used sync.Once and only attempted opening the map once using sync.Once. Subsequent tried to open the map would always fail without ever retrying, i.e. the initial failure always became a permanent failure. Fixes: #2965 Reported-by: @mrdima Signed-off-by: Thomas Graf <thomas@cilium.io> 06 March 2018, 01:30:40 UTC
04b1a70 Jarno Rajahalme 05 March 2018, 22:27:14 UTC Vagrantfile: Support additional mounts. Add support for an arbitrary number of folder mounts in addition to the cilium repo itself. Environment variable USER_MOUNTS can be set to a comma-separated list of mount specifications. Each mount specification can be simply a directory name relative to the home directory, or include a '=' character separating the destination mount point from the host directory. Examples: - USER_MOUNTS=foo Mounts ~/foo as /home/vagrant/foo. - USER_MOUNTS=foo,/tmp/bar=/tmp/bar Mounts host directory ~/foo as /home/vagrant/foo in the VM, and host directory /tmp/bar as /tmp/bar in the VM. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 06 March 2018, 01:20:20 UTC
9fa794b Thomas Graf 04 March 2018, 04:43:10 UTC consul: Report modified keys even if previously not known When a modified key with CreateIndex != ModifyIndex was not found locally, a warning was emitted but no event was emitted. Keep the warning but still report the key as modified. Signed-off-by: Thomas Graf <thomas@cilium.io> 05 March 2018, 20:13:02 UTC
680d6bf Thomas Graf 04 March 2018, 04:39:24 UTC consul: Fix use of Warningf() Signed-off-by: Thomas Graf <thomas@cilium.io> 05 March 2018, 20:13:02 UTC
7c0739e Ian Vernon 04 March 2018, 18:47:17 UTC pkg/lock: override default options for deadlock detection Set timeout to be 310 seconds instead of 30 seconds. This is to avoid false-positives in deadlock detection when endpoint BPF programs are being regenerated and are taking a while (up to 300 seconds) to regenerate. Signed-off by: Ian Vernon <ian@cilium.io> 05 March 2018, 18:54:19 UTC
3f14985 André Martins 05 March 2018, 17:03:30 UTC README: update zoom meeting link Signed-off-by: André Martins <andre@cilium.io> 05 March 2018, 18:51:17 UTC
55ed0c1 Eloy Coto 05 March 2018, 09:53:57 UTC Nightly: Adjust timeouts and stdout Curl on exec - Change the timeouts, Jenkins is failing due timeout. - Update kubectl exec, as default always return the message `command terminated with exit code 22` and the Action didn't work as exepected (Only in k8s >= 1.8 ) Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 05 March 2018, 17:35:46 UTC
d76e7f4 halfcrazy 04 March 2018, 07:34:37 UTC doc: fix broken link for Installation Guides 04 March 2018, 19:20:22 UTC
8104d12 André Martins 02 March 2018, 21:40:24 UTC Vagrantfile: Re-add NFS support Signed-off-by: André Martins <andre@cilium.io> 03 March 2018, 00:22:50 UTC
01f47e3 André Martins 01 March 2018, 15:07:46 UTC docs: document k8s NP missing features Signed-off-by: André Martins <andre@cilium.io> 03 March 2018, 00:22:31 UTC
6cd8cf5 Eloy Coto 02 March 2018, 10:19:01 UTC Nightly: Update CPU and RAM in Nightly test Updated the CPU and Memory in Nightly test and update kubernetes version to 1.8 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 03 March 2018, 00:22:11 UTC
1da7757 Thomas Graf 02 March 2018, 23:39:36 UTC release: Inlcude k8s-cilium-exec.sh as tools in release directory Signed-off-by: Thomas Graf <thomas@cilium.io> 02 March 2018, 23:39:37 UTC
8703e8d Thomas Graf 02 March 2018, 21:31:50 UTC Update NEWS and VERSION for 1.0.0-rc6 Signed-off-by: Thomas Graf <thomas@cilium.io> 02 March 2018, 21:39:58 UTC
5e90ac8 Joe Stringer 01 March 2018, 21:30:37 UTC docs: Check all requirements and exit on failure When a dependency cannot be found: $ make -C Documentation/ check-requirements make: Entering directory '/home/joe/work/src/github.com/cilium/cilium/Documentation' Documentation dependency 'foo' not found. Run 'pip install -r Documentation/requirements.txt' Makefile:23: recipe for target 'check-requirements' failed make: *** [check-requirements] Error 2 make: Leaving directory '/home/joe/work/src/github.com/cilium/cilium/Documentation' Signed-off-by: Joe Stringer <joe@covalent.io> 02 March 2018, 01:04:50 UTC
f67102a Joe Stringer 28 February 2018, 21:55:27 UTC bpf: Compile with debug options when DEBUG=true This annotates the BPF ELF with C code so that it's easier to debug where in the datapath code a verifier error is occurring. Signed-off-by: Joe Stringer <joe@covalent.io> 02 March 2018, 01:04:06 UTC
2de02ec Joe Stringer 28 February 2018, 21:54:30 UTC docs: Document tail call section label meanings Signed-off-by: Joe Stringer <joe@covalent.io> 02 March 2018, 01:04:06 UTC
9e0db26 Jarno Rajahalme 01 March 2018, 18:36:24 UTC envoy: Differentiate between ACKs and NACKs. Since the last update on the cilium agent envoy API code, the behavior had changed to keep sending the same resource version over and over if Envoy rejects the resource. Fix this by properly differentiating between ACKs and NACKs. A NACK now causes a watcher to wait until the resource is updated before sending it over again. This was found due to the new policy resources failing protobuf content validation that Envoy checks for. We should test for the NACK behavior as well to prevent future regressions. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 01 March 2018, 23:45:38 UTC
d88dca7 Jarno Rajahalme 01 March 2018, 18:36:24 UTC envoy: Add NACK test. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 01 March 2018, 23:45:38 UTC
80e804b Ian Vernon 01 March 2018, 18:42:45 UTC test/helpers: check result of PolicyWait in PolicyImportAndWait The result of `cilium policy wait` was never checked, and thus did not appropriately signify failure. Signed-off by: Ian Vernon <ian@cilium.io> 01 March 2018, 21:51:39 UTC
cfa0003 Dan Wendlandt 01 March 2018, 20:01:23 UTC Add Cilium upgrade guide with upgrade instructions for kubernetes 01 March 2018, 20:41:39 UTC
5c370b5 Joe Stringer 01 March 2018, 07:34:26 UTC Ginkgo: Replace awk usage with jq The majority of the cilium commands now have support for '-o json' output, so replace these usages of '... | grep ... | awk ...' with '-o json | jq ...'. Fixes: #1725 Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 20:22:11 UTC
5e989eb Joe Stringer 28 February 2018, 01:11:35 UTC bpf: Shift l4 policy lookup to __policy_can_access L4 policy will in future be tied in with the standard L3/L4 BPF map lookup, so shift this logic to there. In the case of egress policy, there is no blob there yet so just shift the proxy logic out of conntrack creation, closer to where it will be implemented when label-based+l4 egress policy is implemented. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
3224692 Joe Stringer 28 February 2018, 00:16:16 UTC bpf: Add proxy_port to POLICY_MAP entries If userspace populates the 'proxy_port' field of a policy entry, return it as part of policy_can_access_ingress(). Userspace can now populate this portion of policy map entries and the proxy port will be respected by the datapath. Related: #2904 Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
d16c9a8 Joe Stringer 22 February 2018, 20:31:57 UTC bpf: Apply L4-only policy in policy_can_access() Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
3d2e394 Joe Stringer 28 February 2018, 00:10:07 UTC bpf: Refactor l4 policy / proxy_port lookup Extricate proxy_port determination from conntrack. This will be replaced by a map lookup in future, so factoring it out helps to move it in that direction. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
6db5481 Joe Stringer 28 February 2018, 00:59:28 UTC bpf: Reuse tuple for dport in ingress l4 policy Just before this gets hit on the ingress path in ipv4_policy(), the ct_state's orig_dport field gets updated to be the same as the tuple's dport. Replacing it here as well makes the code more consistent with the IPv6 codepath and should have no outward effect. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
78c54d3 Joe Stringer 22 February 2018, 20:29:32 UTC bpf: Document policy_can_access() Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
cc930f6 Joe Stringer 22 February 2018, 19:32:31 UTC bpf: Document proxymap key/value Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
e3b5bb1 Joe Stringer 22 February 2018, 07:24:41 UTC bpf: Make reverse_proxy arguments same for IPv4/6 Update the reverse_proxy() final argument to pass the only field in the CT tuple which it uses, the nexthdr. This makes the IPv4 path more similar to the IPv6 path. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
e0a4dc7 Joe Stringer 24 February 2018, 00:07:12 UTC bpf: Rename ingress policy lookups All of the current policy_can_access() calls are for ingress only. Indicate this and hide the map argument while we're at it. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
fdd4bc1 Joe Stringer 01 March 2018, 00:28:44 UTC pkg/maps/policymap: Get rid of 'Action' field The 'Action' field of a 'policyEntry' was never used to determine the action to execute on the datapath, but userspace always populated this field. Remove the userspace bits which populate the field so it can be reused in future. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 19:45:43 UTC
be0968c Ian Vernon 01 March 2018, 04:21:16 UTC add capability to build Cilium with deadlock detection in Docker image Use this capability during the Cilium Kubernetes tests, which will catch deadlocks during tests. Signed-off by: Ian Vernon <ian@cilium.io> 01 March 2018, 19:39:11 UTC
378adab Ian Vernon 01 March 2018, 03:20:52 UTC test/helpers: add deadlock detection for Cilium pods Add function that, if a test fails, checks if a deadlock has occurred via output in the Cilium logs. Signed-off by: Ian Vernon <ian@cilium.io> 01 March 2018, 19:39:11 UTC
139279d Ian Vernon 01 March 2018, 03:13:56 UTC test/helpers: add runtime test deadlock check If a test fails, also check to see if there are any logs signifying that a deadlock has occurred in Cilium. Signed-off by: Ian Vernon <ian@cilium.io> 01 March 2018, 19:39:11 UTC
30ce72e Ian Vernon 01 March 2018, 03:06:28 UTC test/provision: compile Cilium with LOCKDEBUG=1 This will allow for deadlock detection in the runtime tests. Signed-off by: Ian Vernon <ian@cilium.io> 01 March 2018, 19:39:11 UTC
befca0b Eloy Coto 01 March 2018, 17:13:59 UTC Nightly: Fix issues with timeout When Jenkins timeout the Post-Build is not executed (It's a open issue), so the logs from ginkgo cannot be retrieved. I decrease the timeout, it took 177minutes in my computer, so 220 should be enough to run in Jenkins. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 01 March 2018, 18:22:21 UTC
28954bc Eloy Coto 01 March 2018, 10:14:20 UTC Ginkgo: Fix some assert messages Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 01 March 2018, 17:56:22 UTC
1feeaa2 Eloy Coto 28 February 2018, 12:32:55 UTC Ginkgo: Refactor Kubectl.ExecPodCmd ExecPodCmd function uses a unique buffer instead of the global one. The execution was not saved on log, and the output was not the standard ResCmd. With this change, all ExecPodCmd calls are using the standard way. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 01 March 2018, 17:56:22 UTC
d74da92 Eloy Coto 28 February 2018, 20:17:56 UTC Ginkgo: Connectivity refactor some code to make it simpler Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 01 March 2018, 17:49:02 UTC
40436b2 Eloy Coto 28 February 2018, 20:13:37 UTC Ginkgo: Refactor Ginkgo to accept multiple arguments Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 01 March 2018, 17:49:02 UTC
a40d4c2 Joe Stringer 28 February 2018, 17:25:08 UTC docs: Make requirements failure more obvious Commit 9829de20c294 ("Makefile: Build docs via dummy target in postcheck") made a basic docs target always get made whenever someone does a 'make' with no arguments, but also made it less clear why documentation build targets fail if some pip dependency is not available. Improve it. Signed-off-by: Joe Stringer <joe@covalent.io> 01 March 2018, 02:19:22 UTC
02a186f André Martins 21 February 2018, 02:28:01 UTC k8s: add enforce and revision fields to CNP status Add controllers for each cilium network policy that allows to update the revision number and its enforcement on the endpoints running on each node. Output example from different sources (K8S - 172 is not running with this changes): $ cilium status --all-controllers ... Name Last success Last error Count Message ... sync-cnp-policy-status (v2 default/guestbook-web) 4s ago never 0 no error ... $ kubectl describe cnp Name: guestbook-web Namespace: default API Version: cilium.io/v2 .... Status: Nodes: K 8 S - 171: Enforcing: true Last Updated: 2018-02-21T02:49:53.063373958Z Local Policy Revision: 7 Ok: true K 8 S - 172: Last Updated: 2018-02-20T14:53:51.928648228Z Ok: true $ cilium policy get | tail -n 1 Revision: 7 28 February 2018, 20:47:34 UTC
acd6eba André Martins 21 February 2018, 02:30:58 UTC pkg/endpointmanager: add WaitForEndpointsAtPolicyRev By using the WaitForPolicyRevision function implemented in the endpoint we can leverage to know when all the endpoints have reached a given policy revision. Signed-off-by: André Martins <andre@cilium.io> 28 February 2018, 20:47:34 UTC
d2e9281 André Martins 20 February 2018, 21:09:04 UTC pkg/endpoint: add signals for policy revision Add a signal mechanism to detect if a policy revision of a particular endpoint was changed. This is done throught golang channels instead of polling the policy revision. Signed-off-by: André Martins <andre@cilium.io> 28 February 2018, 20:47:34 UTC
7a3586f André Martins 20 February 2018, 16:14:11 UTC pkg/endpoint: add policyRevision Setter Signed-off-by: André Martins <andre@cilium.io> 28 February 2018, 20:47:34 UTC
fcdfbcb Jarno Rajahalme 28 February 2018, 19:10:14 UTC envoy: Use downstream HTTP protocol for upstream connections. gRPC connectivity fail if transported over HTTP/1 connections. The way this feature is configured changed when upstreaming to Envoy, and the refactored code inadvertently used the enum for using the configured rather than downstream protocol for upstream connections. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> Reported-by: Ian Vernon <ian@cilium.io> 28 February 2018, 20:46:13 UTC
ddc3da7 Eloy Coto 28 February 2018, 11:45:52 UTC Ginkgo: Kubernetes ReportFailed get information from all cilium Pods. Change CiliumReportFailed function to retrieve the info from all cilium Pods and dump with a prefix. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 28 February 2018, 17:05:02 UTC
e54dc46 Thomas Graf 25 February 2018, 16:43:17 UTC cilium-docker: Update HostAddressing via IPAM allocation call The agent may be restarted which can lead to updated host addressing details such as different gateway addresses, keep the HostAddressing up to date and recalculate routes as required. Signed-off-by: Thomas Graf <thomas@cilium.io> 28 February 2018, 14:40:03 UTC
3dac7b4 Ian Vernon 23 February 2018, 05:44:10 UTC test/helpers: add "-W 2" to ping wrapper functions Signed-off by: Ian Vernon <ian@cilium.io> 28 February 2018, 06:06:34 UTC
6d1d3d3 Ian Vernon 23 February 2018, 05:42:31 UTC test/helpers: improve documentation of CiliumNodesWait Signed-off by: Ian Vernon <ian@cilium.io> 28 February 2018, 06:06:34 UTC
ace7915 Ian Vernon 23 February 2018, 05:40:12 UTC test/helpers: rename "exit" to "success" in CmdRes type Signed-off by: Ian Vernon <ian@cilium.io> 28 February 2018, 06:06:34 UTC
6088a25 Ian Vernon 23 February 2018, 05:39:47 UTC test/helpers: remove hardcoding of PolicyEnforcement in SetPolicyEnforcement Signed-off by: Ian Vernon <ian@cilium.io> 28 February 2018, 06:06:34 UTC
65ab3b1 Ian Vernon 23 February 2018, 05:37:47 UTC test/helpers: check for unsuccessful command in PolicyEndpointsSummary Signed-off by: Ian Vernon <ian@cilium.io> 28 February 2018, 06:06:34 UTC
fdf10b7 Ian Vernon 23 February 2018, 05:32:49 UTC test/helpers: rename GetEndpoints to ListEndpoints This function runs "cilium endpoint list", and there is another command, "cilium endpoint get", which makes the name of the function "GetEndpoints", confusing. Rename it to be more evocative of the command it runs. Signed-off by: Ian Vernon <ian@cilium.io> 28 February 2018, 06:06:34 UTC
941b3f1 Jarno Rajahalme 28 February 2018, 03:08:24 UTC check-log-newlines: Check only the cilium repo. The script checked everyting under github.com and failed for non-related code. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 28 February 2018, 06:03:18 UTC
2a4f952 Joe Stringer 23 February 2018, 19:28:25 UTC test/bpf: Add script to load BPF progs Add a new test script which attempts to load each of the compiled BPF programs into the currently running kernel. If any fail, it should print the verbose output from the verifier. Signed-off-by: Joe Stringer <joe@covalent.io> 28 February 2018, 03:42:15 UTC
f603b77 Joe Stringer 24 February 2018, 02:11:08 UTC test/bpf: Add script to run probes Signed-off-by: Joe Stringer <joe@covalent.io> 28 February 2018, 03:42:15 UTC
8ca6b27 Joe Stringer 23 February 2018, 19:09:36 UTC test/bpf: Clean up after running perf-event-test Signed-off-by: Joe Stringer <joe@covalent.io> 28 February 2018, 03:42:15 UTC
back to top