Skip to main content

Browse the archive

https://github.com/cilium/cilium
12 July 2024, 03:14:21 UTC
sort by:
Revision Author Date Message Commit Date
5e0516a Ian Vernon 10 April 2018, 21:21:58 UTC test/k8sT: do not defer deletion of resources within It In K8sValidatedPolicyTestAcrossNamespaces, the deletion of pods and policies was wrapped with `defer` calls, which meant that regardless of whether the test failed or succeeded, the aforementioned resources were deleted within the `It` for the test. Destruction of such resources should only be performed in the `AfterEach` block of the test, as we want all resources to still be present for running log-gathering scripts like `cilium bugtool`. Signed-off by: Ian Vernon <ian@cilium.io> 14 April 2018, 00:09:13 UTC
d0b8fe7 André Martins 11 April 2018, 12:45:23 UTC test: update kubedns to 1.14.9 Since kubedns 1.14.9 contains bug fixes it might help in kube-dns issues the CI is having Signed-off-by: André Martins <andre@cilium.io> 14 April 2018, 00:07:39 UTC
1e1fbbd Jarno Rajahalme 13 April 2018, 20:13:56 UTC envoy: Remove assert, reduce logging. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 14 April 2018, 00:07:03 UTC
279d1a8 Daniel Borkmann 13 April 2018, 10:14:47 UTC docs, bpf: finalize initial round on xdp section Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> 13 April 2018, 21:31:37 UTC
118ad82 Thomas Graf 13 April 2018, 06:44:46 UTC policy: Do not wildcard CIDR 0/0 for world and all entity With the introduction of label based egress including the world and all identity, it is no longer required to whitelist CIDR 0/0 for the world and all entity as it is covered by the identity based policy map which also supports L4. This allows to define rules such as: [{ "endpointSelector": {"matchLabels": {}}, "egress": [{ "toEntities": ["world"], "toPorts": [ {"ports":[ {"port": "80", "protocol": "TCP"}, {"port": "53", "protocol": "UDP"} ]} ] }] }] Signed-off-by: Thomas Graf <thomas@cilium.io> 13 April 2018, 20:36:46 UTC
935d0ab Eloy Coto 12 April 2018, 10:43:40 UTC Docs: Add a new `test-docs-please` phrase to test only docs Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 13 April 2018, 18:40:17 UTC
e93a9fd Eloy Coto 10 April 2018, 15:01:37 UTC DOC: Update cilium contributing docs: - Added documentation for JustAfterEach, AfterFailed and example flow of execution. - Extend documentation related to sshConfig - Added documenation how to run ginkgo using delve. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 13 April 2018, 16:52:00 UTC
5ac8834 Eloy Coto 13 April 2018, 10:44:44 UTC Test: CNP use full FQDN Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 13 April 2018, 16:23:00 UTC
ee0a66d Eloy Coto 13 April 2018, 09:31:10 UTC Test: Validate DNS before trying to connect on curl This commit intruduced a new Kubectl method that make sure that the DNS exits before pods try to connect to other pod using DNS. On the other hand, changed all services names to use the full FQDN, some containers didn't use the search directive commands [0] and the name resolution didn't work as expected: Example trace: ``` U +0.477121 10.10.0.77:47324 -> 10.10.0.18:53 ~''''''''''''deathstar'default''''' U +0.000141 10.10.0.18:19419 -> 8.8.8.8:53 '''''''''''''deathstar'default''''' U +0.000320 10.10.0.18:19419 -> 8.8.4.4:53 '''''''''''''deathstar'default''''' U +0.000318 10.10.0.77:47324 -> 10.10.0.18:53 '''''''''''''deathstar'default''''' U +0.000070 10.10.0.18:40244 -> 8.8.8.8:53 '''''''''''''deathstar'default''''' U +0.064932 8.8.4.4:53 -> 10.10.0.18:19419 '''''''''''''deathstar'default''''''''''''Q{'@'a'root-servers'net''nstld'verisign-grs'com'xH'''''''''''':'''Q' ``` [0] https://github.com/gliderlabs/docker-alpine/blob/master/docs/caveats.commands#dns Fix #3712 Fix #3675 Fix #3462 Fix #3676 Fix #3694 Fix #3695 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 13 April 2018, 16:23:00 UTC
efb3222 André Martins 13 April 2018, 11:36:08 UTC docs: fix misspelled words Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 12:50:16 UTC
92f7ae1 Ray Bejjani 13 April 2018, 10:10:59 UTC doc: system requirements mention meltdown 13 April 2018, 11:23:30 UTC
3110085 Joe Stringer 10 April 2018, 23:51:58 UTC Revert "bpf: Allow CT creation on FIN" This reverts commit 3389456b3b4dbdac94541c5169fb7de371db78b4. Signed-off-by: Joe Stringer <joe@covalent.io> 13 April 2018, 09:53:35 UTC
64bc5df Joe Stringer 10 April 2018, 22:00:47 UTC bpf: Only create conntrack entries for SYN packets Previously in e4c58da6d6a5 ("bpf: Simplify connection tracking logic"), we loosened the policy for creating conntrack entries to allow entries for long-lived connections to be temporarily removed and to be subsequently added. This worked around issues with overzealous conntrack cleanup and proxy implementations with no keepalives. After recent commits to simplify & streamline conntrack garbage collection, and updates to the keepalive policy, we expect that it is now safe again to require a SYN packet to create a connection. This also allows deletion of conntrack entries due to commit 9095ef8918e3 ("bpf: Remove connection tracking entries on policy deny") to halt ongoing connections when a liberal egress policy is in place, rather than allowing such connections to continue due to egress traffic re-creating the conntrack entry. Signed-off-by: Joe Stringer <joe@covalent.io> 13 April 2018, 09:53:35 UTC
f486df7 André Martins 12 April 2018, 15:29:28 UTC docs: add istio GSG to the list of GSGs Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
7e8fdff André Martins 12 April 2018, 15:09:51 UTC docs: GSG add instructions to install standalone etcd Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
b037c83 André Martins 12 April 2018, 15:09:13 UTC examples/kubernetes: move standalone-etcd.yaml to addons/ Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
45e7b89 André Martins 12 April 2018, 15:03:51 UTC docs: use common minikube setup for all GSG Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
016db04 André Martins 12 April 2018, 15:00:39 UTC examples/kubernetes: change etcd default port Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
3c767f2 André Martins 12 April 2018, 14:58:32 UTC examples/kubernetes: avoid port conflict for running etcd By setting the listen-peer-urls to a particular port etcd can avoid clashing with an existing etcd instance listenning on the same default port. Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
2d4ad0c André Martins 12 April 2018, 14:45:39 UTC examples/kubernetes: keep file order when catenating all files into one Signed-off-by: André Martins <andre@cilium.io> 13 April 2018, 09:52:14 UTC
403b265 Daniel Borkmann 12 April 2018, 08:40:30 UTC docs, bpf: initial xdp section and improved projects section Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> 13 April 2018, 09:50:44 UTC
49d2785 ashwinp 13 April 2018, 01:09:47 UTC Update docs related to cluster-diagnosis - add doc section for system dump collection Signed-off-by: Ashwin Paranjpe <ashwin@covalent.io> 13 April 2018, 04:53:18 UTC
3ba379a Jarno Rajahalme 12 April 2018, 22:32:21 UTC daemon: Regenerate endpoint in PATCH handler also when endpoint is in waiting-for-identity state. commit 41c08396ce ("daemon: Only regenerate in PATCH from valid state") intended to limit endpoint regeneration calls from the API PATCH endpoint handler to valid endpoint states, but inadvertently limited the allowed states only to waiting-to-regenerate, while the endpoint should also be built while in the waiting-for-identity state. The symptom was that endpoints created via docker never built the initial drop-all bpf program while waiting for identity. This commit allows endpoint regeneration via the PATCH endpoint API also when the endpoint is in wairing-for-identity state. Fixes: 41c08396ce ("daemon: Only regenerate in PATCH from valid state") Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 13 April 2018, 04:09:33 UTC
1314122 Ray Bejjani 11 April 2018, 17:42:24 UTC doc: Update metrics documentation & list exported metrics We export a small list of metrics and now list them in the docs. This change also includes some text fixups and a bad link to the prometheus configuration. 12 April 2018, 21:55:24 UTC
6ba1209 Ray Bejjani 12 April 2018, 18:35:17 UTC docs: Update system requirements Signed-off-by: Ray Bejjani <ray@covalent.io> 12 April 2018, 21:53:57 UTC
8515b21 Jarno Rajahalme 12 April 2018, 17:44:03 UTC endpoint: Fix label replacement. Fix bugs in label updates: - Information labels were never deleted - Information label assignments were logged even when nothing changed - Identity label updates never updated the Source or Value of an existing label Add unit test for label updates. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 12 April 2018, 20:59:55 UTC
b195507 Joe Stringer 12 April 2018, 18:05:30 UTC tunnel: Remove old tunnel map upon upgrade. This fixes up #3681 to ensure we don't end up with extraneous map entries on the filesystem after upgrade. Signed-off-by: Joe Stringer <joe@covalent.io> 12 April 2018, 20:29:52 UTC
ddcc645 Manali Bhutiyani 12 April 2018, 17:52:57 UTC CI: Remove call to WaitUntilEndpointUpdates, if CiliumPolicyAction is present. CiliumPolicyAction takes care of waiting till endpoints get updated correctly. Remove the unnecessary calling of WaitUntilEndpointUpdates, in addition to CiliumPolicyAction. Fixes :#3343 Signed-Off-By: Manali Bhutiyani <manali@covalent.io> 12 April 2018, 19:27:45 UTC
9ba22a0 Manali Bhutiyani 10 April 2018, 22:26:06 UTC CI: Add ingress/egress default deny tests for CNP Fixes :#3343 Signed-Off-By: Manali Bhutiyani <manali@covalent.io> 12 April 2018, 19:27:45 UTC
768fbdf Jarno Rajahalme 11 April 2018, 22:59:46 UTC envoy: Pass 'non-redirect' http traffic through. Cilium only creates a host proxy redirect when the relevant policy has http rules. A sidecar proxy gets also traffic that would not have been redirected with a host proxy. To emulate the host proxy behavior we pass (allow) traffic through a sidecar if it is passed through by the bpf datapath and would not have been redirected to a host proxy. There are two cases in cilium network policy enforcement where we can detect that the given packet would not have been forwarded to a host proxy: 1. There is no port policy that covers this connection. Cilium always configures a port policy for a redirect, and hence if we find that there is no applicable port policy, the connection must have been passed by the bpf datapath to a sidecar and the sidecar proxy should pass it through, i.e., consider the decision made by the bpf datapath final. 2. There is a port policy, but it does not have any http rules. Again, in this case this request would not have been redirected to a host proxy, and we must consider bpf datapath policy decision as final by passing the request through the sidecar proxy. There changes are marked with TODOs as they will need to be reconsidered when a non-bpf datapaths are supported. Suggested-by: Romain Lenglet <romain@covalent.io> Signed-off-by: Jarno Rajahalme <jarno@covalent.io> 12 April 2018, 15:22:37 UTC
b200061 Maciej Kwiek 11 April 2018, 14:23:54 UTC [DOCS] Edit API compatibility guarantees section Signed-off-by: Maciej Kwiek <maciej@covalent.io> 12 April 2018, 14:21:42 UTC
5e64046 Eloy Coto 11 April 2018, 07:45:19 UTC DOC: Cheatsheet change structure - Add a intro in the page - Change structure of the page to multiple headline levels. - Add Kubernetes section - Add a quick tip how to install tab completion and json support. - Add some cilium commands. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 12 April 2018, 13:19:27 UTC
323973b Romain Lenglet 11 April 2018, 19:13:38 UTC doc: Use K8s-version-specific YAML files in Istio GSG Signed-off-by: Romain Lenglet <romain@covalent.io> 12 April 2018, 12:59:39 UTC
b542e40 Romain Lenglet 10 April 2018, 09:46:26 UTC examples/kubernetes: Generate daemon sets defs for sidecar mode Clean up examples/kubernetes/Makefile. Add support for V=0 quiet option. Add support for multiple daemon set definitions for each Kubernetes version. Generate */cilium-sidecar*.yaml daemon set files for running Cilium along with Istio. Signed-off-by: Romain Lenglet <romain@covalent.io> 12 April 2018, 12:59:39 UTC
a04087a Romain Lenglet 04 April 2018, 15:48:16 UTC doc: Update Istio GSG for Istio 0.7.0 Signed-off-by: Romain Lenglet <romain@covalent.io> 12 April 2018, 12:59:39 UTC
f117836 Joe Stringer 12 April 2018, 04:26:20 UTC bpf: Rename tunnel_endpoint_map -> cilium_tunnel_map Rename the tunnel endpoint map so it has the same prefix as all of the other cilium maps. Signed-off-by: Joe Stringer <joe@covalent.io> 12 April 2018, 12:48:33 UTC
3344b52 Ian Vernon 11 April 2018, 19:26:32 UTC test/helpers: add previous Cilium pod logs to kubectl.GatherLogs() Signed-off by: Ian Vernon <ian@cilium.io> 12 April 2018, 12:46:38 UTC
352fa2a Eloy Coto 12 April 2018, 08:35:41 UTC Test: Enabled K8sUpdates correctly. On abc97b91ac7bf088e46e556cca357f1b91f8531d the test was mark to run, but in the It there was a return that I didn't figure it out, so the whole test was not running. :-( Related to: #3624 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 12 April 2018, 12:46:07 UTC
39d3b06 Eloy Coto 12 April 2018, 10:54:40 UTC Test: Fix issue with Kubectl describe Kubectl describe does not have `-o json` option available. And the output in a failed test was not correct. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 12 April 2018, 12:45:37 UTC
d7a17db Daniel Borkmann 11 April 2018, 15:02:02 UTC docs, bpf: complete iproute2 section and add llvm inline asm example Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> 12 April 2018, 00:45:09 UTC
7a2ecac Manali Bhutiyani 11 April 2018, 19:40:12 UTC docs: Minikube audit. Add reference links wherever required. Improve docs wherever required. Part of the 1.0 Documentation Review. Fixes: #3669 Related to: #3597 Signed-Off-By: Manali Bhutiyani <manali@covalent.io> 12 April 2018, 00:11:41 UTC
99297d4 Ian Vernon 11 April 2018, 18:28:51 UTC test/k8sT: do not access redis-master via hostname, only service IP In K8s 1.7 tests, there are issues accessing redis-master via hostname. Disable accessing redis-master via its hostname until K8s 1.7 is updated in CI to a newer version. See GH-3462 for more information. Signed-off by: Ian Vernon <ian@cilium.io> 11 April 2018, 23:07:38 UTC
45bca6a André Martins 11 April 2018, 17:14:59 UTC docs: review troubleshooting guide Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 19:52:58 UTC
bb8d3f1 André Martins 11 April 2018, 13:33:10 UTC docs: fix some misspelled words Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 19:45:39 UTC
2508f2d André Martins 11 April 2018, 13:31:30 UTC docs: add misspell words checker Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 19:45:39 UTC
025e558 André Martins 10 April 2018, 13:10:22 UTC docs: add quay.io tutorial - Add tutorial to update cilium-runtime and cilium-builder images Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 18:23:01 UTC
08b4b2c André Martins 10 April 2018, 12:42:12 UTC docs: fix titles formatting Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 18:23:01 UTC
8e0a92d André Martins 10 April 2018, 11:09:30 UTC Makefile: remove docker-image push instructions Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 18:23:01 UTC
952ae20 André Martins 10 April 2018, 11:07:25 UTC envoy: move Dockerfile.builder to envoy directory Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 18:23:01 UTC
c867679 André Martins 09 April 2018, 19:28:40 UTC Dockerfile: point dockerfile to quay.io base images Since quay.io does not detect symlinks we have to move the Dockefile directly to the envoy directory. Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 18:23:01 UTC
bdcb94e André Martins 29 March 2018, 17:20:09 UTC packaging/docker: update docker runtime to 17.10 Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 18:23:01 UTC
b97c14d Eloy Coto 11 April 2018, 10:27:31 UTC Test: Add separate logs per each cilium pod Fix 3636 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 11 April 2018, 17:47:37 UTC
ee23ad0 Ian Vernon 25 October 2017, 19:08:07 UTC pkg/ip: add functionality to coalesce CIDR list Add CoalesceCIDRs and associated helper functions, which combines a list of CIDRs into the smallest equivalent set of CIDRs. Signed-off by: Ian Vernon <ian@cilium.io> 11 April 2018, 17:44:30 UTC
b8babe4 Romain Lenglet 11 April 2018, 06:33:08 UTC test: Fix K8s demos to not use TTYs with kubectl exec Signed-off-by: Romain Lenglet <romain@covalent.io> 11 April 2018, 15:37:26 UTC
7a73360 André Martins 11 April 2018, 11:40:18 UTC pkg/node: fix nil pointer dereference If a node doesn't have any IPv6 address cilium can panic while trying to delete the IPv6 routes of that node. Signed-off-by: André Martins <andre@cilium.io> Reported-by: Markus Padourek <markus.padourek@gmail.com> 11 April 2018, 12:54:50 UTC
cb9020a Eloy Coto 03 April 2018, 10:29:14 UTC Test: trigger AfterFailed before AfterEach when is in Context When a context is defined with a AfterEach the AfterEach function will be called before `JustAfterEach` and `AfterFailed` and some info cannot be retrieved correctly because no longer exits. With this commit all the `JustAfterEach` and `AfterFailed` will be called just before the AfterEach. Fix #3481 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 11 April 2018, 12:32:25 UTC
66f4279 André Martins 06 April 2018, 23:27:14 UTC docs: fix spelling in documentation Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 12:30:19 UTC
980d1e0 André Martins 06 April 2018, 23:26:09 UTC docs: add custom worldlist for spellcheck Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 12:30:19 UTC
e670050 André Martins 06 April 2018, 23:25:21 UTC docs: add sphinx-spelling to documentation Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 12:30:19 UTC
f854ce8 André Martins 10 April 2018, 23:58:42 UTC examples/k8s: fix 1.8 spec files Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 12:28:28 UTC
985c95c André Martins 10 April 2018, 23:57:53 UTC docs: update minikube GSG Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 12:26:03 UTC
aca339e Daniel Borkmann 10 April 2018, 11:37:35 UTC bpf: further work on bpf reference guide Add various improvements all over the place plus a section on bpftool and BPF to BPF calls. XDP and tc coming next. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> 11 April 2018, 12:19:39 UTC
c26a37b Daniel Borkmann 09 April 2018, 19:24:55 UTC docs: update mailmap and authors Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> 11 April 2018, 12:19:39 UTC
5b03fb8 Romain Lenglet 10 April 2018, 17:30:23 UTC daemon: Clean up access log setup Pass access logging settings as parameters instead of coupling via viper flags. Minor log message cleanups. Signed-off-by: Romain Lenglet <romain@covalent.io> 11 April 2018, 07:13:55 UTC
c9b0328 Thomas Graf 10 April 2018, 22:30:15 UTC health: Do sanity checking on health response Check all fields for potential nil pointers. Some of the fields can be omitted if the health API is triggered while the agent is still bootstrapping. Fixes: #3628 Signed-off-by: Thomas Graf <thomas@cilium.io> 11 April 2018, 06:12:34 UTC
80a1f22 André Martins 10 April 2018, 23:57:17 UTC docs: review kafka GSG Signed-off-by: André Martins <andre@cilium.io> 11 April 2018, 05:18:55 UTC
60a4b52 Eloy Coto 09 April 2018, 11:29:29 UTC Test: Enable Cilium Update test - Update cilium_ds.yaml to use cilium/cilium:stable image - Delete scale command. It'll fail with 5 or 8 containers. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 10 April 2018, 20:31:59 UTC
1df6acc Ian Vernon 10 April 2018, 18:24:00 UTC pkg/endpoint: log what caused policy changes Before this commit, we only logged whether policy was changed or not for a given endpoint or consumable, not what caused the policy change itself. To get more visibility into what might trigger regenerations, log at debug level what causes policy changes. Signed-off by: Ian Vernon <ian@cilium.io> 10 April 2018, 20:30:13 UTC
473a2d8 Ian Vernon 10 April 2018, 15:59:43 UTC test/k8sT: add more descriptive error messages to Guestbook test Signed-off by: Ian Vernon <ian@cilium.io> 10 April 2018, 20:29:58 UTC
72a3f86 Ian Vernon 09 April 2018, 22:19:22 UTC test/k8sT: add wait for service endpoints to be ready in guestbook test Signed-off by: Ian Vernon <ian@cilium.io> 10 April 2018, 20:29:58 UTC
0fb21a4 Ian Vernon 09 April 2018, 19:57:46 UTC test/k8sT: query both service IP and hostname of redis master This will add more visibility to cases where there is an issue with resolving service names via DNS. Signed-off by: Ian Vernon <ian@cilium.io> 10 April 2018, 20:29:58 UTC
ebf2a35 Ian Vernon 09 April 2018, 17:55:11 UTC test/helpers: gather more K8s metadata * Get output in JSON for K8s-related objects in K8s log gathering functions. * Get replicationcontroller and deployment data. Signed-off by: Ian Vernon <ian@cilium.io> 10 April 2018, 20:29:58 UTC
adb32c6 Romain Lenglet 10 April 2018, 18:31:04 UTC docs: Use go-swagger Docker container to generate APIs Signed-off-by: Romain Lenglet <romain@covalent.io> 10 April 2018, 20:28:21 UTC
f4233ea Shantanu Deshpande 10 April 2018, 07:16:44 UTC Change logging of new connections from warn to info level Signed-off-by: Shantanu Deshpande <shantanud106@gmail.com> 10 April 2018, 18:36:52 UTC
1024913 Romain Lenglet 09 April 2018, 20:53:32 UTC proxy: Create access log file and setup notifier at startup Move the access log file and notifier and metadata configuration at daemon startup instead of when creating the first redirect, so access logging is usable with sidecar proxies, for which Cilium doesn't create redirects. Signed-off-by: Romain Lenglet <romain@covalent.io> 10 April 2018, 16:30:30 UTC
4fa2bca Eloy Coto 10 April 2018, 11:09:54 UTC Bugtool: Add gops output - Add gops output for cilium agent to know what happens to the agent in case of something wrong. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> 10 April 2018, 16:08:10 UTC
56d43d5 Thomas Graf 10 April 2018, 07:41:48 UTC agent: Provide non-blocking agent status Signed-off-by: Thomas Graf <thomas@cilium.io> 10 April 2018, 15:59:17 UTC
4d8b510 Thomas Graf 10 April 2018, 01:48:13 UTC policy: Remove connection tracking cleanup on policy change Signed-off-by: Thomas Graf <thomas@cilium.io> 10 April 2018, 15:52:22 UTC
9095ef8 Thomas Graf 10 April 2018, 01:26:38 UTC bpf: Remove connection tracking entries on policy deny Signed-off-by: Thomas Graf <thomas@cilium.io> 10 April 2018, 15:52:22 UTC
b35644e Thomas Graf 09 April 2018, 22:39:00 UTC policy: Do not make initial endpoint DROP_ALL mode dependent on policy option The current code only puts a DROP_ALL in place if the endpoint has ingress or egress policy enforcement enabled. This option is derived based on policies which select the endpoint so the option is likely still disabled at the time we determine this for the first time. This leaves the endpoint unprotected until the labels have been derived and thus policy could have been inspected to affect the ingress/egress policy enforcement bits. Signed-off-by: Thomas Graf <thomas@cilium.io> 10 April 2018, 06:21:41 UTC
51fdcf0 Joe Stringer 09 April 2018, 21:46:03 UTC policy: Log errors inserting CIDR entries Signed-off-by: Joe Stringer <joe@covalent.io> 10 April 2018, 06:21:02 UTC
3ce8067 Joe Stringer 09 April 2018, 22:19:37 UTC cidrmap: Allow insert of any length of CIDR Previously, when attempting to insert CIDRs that differ in length from the maximum prefix length of the protocol type (32 for IPv4, 128 for IPv6), we could end up rejecting the CIDR. Tweak it so that it will accept different CIDR lengths unless the CIDRMap is created without dynamic prefix length (The special XDP prefilter case). Signed-off-by: Joe Stringer <joe@covalent.io> 10 April 2018, 06:21:02 UTC
ca1f1fe Thomas Graf 09 April 2018, 21:36:05 UTC policy: Remove logic to reset proxy port Since commit 52a948c40 ("bpf: Derive proxy_port from policy rather than CT"), the proxy port is always derived from the policy table. This makes it unnecessary to clean up the proxy_port in the connection tracking table and all of the logic can be removed. Signed-off-by: Thomas Graf <thomas@cilium.io> 10 April 2018, 00:45:34 UTC
8152d64 Thomas Graf 09 April 2018, 21:26:05 UTC bpf: Remove proxy_port from conntrack table It is no longer required as the policy map is used to derived the proxy port and the reverse translation occurs via proxymap. Signed-off-by: Thomas Graf <thomas@cilium.io> 10 April 2018, 00:45:34 UTC
f3b4621 Manali Bhutiyani 09 April 2018, 19:53:30 UTC CI: Temporarily add retry 3 times logic in connectivity.go Fixes: #3596 Related to: #3393 Related to: #3595 Related to: #3558 Signed-off-By: Manali Bhutiyani <manali@covalent.io> 09 April 2018, 23:03:47 UTC
5316859 Michal Rostecki 09 April 2018, 11:21:49 UTC pkg/kvstore: Handler error from Get method properly Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
c98584b Michal Rostecki 09 April 2018, 10:49:07 UTC pkg/k8s: Assign value to `rules` variable only if it's used Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
9b1a403 Michal Rostecki 09 April 2018, 10:38:38 UTC pkg/k8s: Remove unused `node` variable assignment Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
816f2cf Michal Rostecki 09 April 2018, 10:35:11 UTC pkg/policy: Don't assingn unused variables Before this change, this package assigned `err` or any other vabiables regardless of whether they are actually used. In some cases, `err` variables were assigned properly, but they weren't checked. Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
e0e7884 Michal Rostecki 09 April 2018, 10:18:11 UTC pkg/ip: Assign value to allowedCIDRs variable only if it's used The first value returned by RemoveCIDRs is not always used and it can be skipped once. Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
c9e509b Michal Rostecki 09 April 2018, 10:01:21 UTC pkg/envoy/xds: Assign value to ip variable only if it's used `ip` variable is used only once, so there is no need of assigning the value of IstioNodeToIP everytime. Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
5937a32 Michal Rostecki 09 April 2018, 09:42:57 UTC pkg/endpoint: Don't declare errs variable in function scope errs variables are used only to get the result of applyNewFilter method and it should be declred in the smallest scope possible. Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
0b19157 Michal Rostecki 09 April 2018, 09:36:44 UTC daemon/endpoint: Handle DeleteElement error properly Error from lxcmap.DeleteElement should be added to the slice of errors, not override it. Signed-off-by: Michal Rostecki <mrostecki@suse.com> 09 April 2018, 22:08:34 UTC
daca889 Ian Vernon 06 April 2018, 22:27:46 UTC .gitignore: ignore test/test_results directory Signed-off by: Ian Vernon <ian@cilium.io> 08 April 2018, 10:16:04 UTC
2e7aef4 André Martins 06 April 2018, 22:42:07 UTC docs: fix l4 policy examples Signed-off-by: André Martins <andre@cilium.io> 08 April 2018, 10:13:12 UTC
f351195 André Martins 06 April 2018, 22:15:58 UTC fix misspelled comments in the code Signed-off-by: André Martins <andre@cilium.io> 07 April 2018, 00:06:15 UTC
b2e9402 Ian Vernon 05 April 2018, 21:12:51 UTC bpf/lib: unconditionally create ipcache bpf map in datapath In case the opening and creating of the map in userspace fails, it now will be unconditionally created in the datapath. This will not affect the datapath because the lookup into the map is only performed when egress policy is enabled in the datapath for a specific endpoint. Signed-off by: Ian Vernon <ian@cilium.io> 06 April 2018, 23:19:32 UTC
5df8397 Ian Vernon 04 April 2018, 20:37:05 UTC pkg/bpf: add additional logging and error handling * Add logs for when we append to list of maps to open after bpffs is mounted. * Log errors that occur when opening / creating maps which are stored in list of maps to open after bpffs is mounted. Signed-off by: Ian Vernon <ian@cilium.io> 06 April 2018, 23:19:32 UTC
09f1936 Ian Vernon 06 April 2018, 07:58:01 UTC pkg/logging/logfields: add log field for BPF map name Signed-off by: Ian Vernon <ian@cilium.io> 06 April 2018, 23:19:32 UTC
11091ed Ian Vernon 04 April 2018, 19:20:33 UTC pkg/maps/ipcache: log if map unable to be opened Signed-off by: Ian Vernon <ian@cilium.io> 06 April 2018, 23:19:32 UTC
back to top