https://github.com/cilium/cilium
- HEAD
- refs/heads/1.2.7-hotfix1-fqdn-regen
- refs/heads/EndpointPolicyEnformcement
- refs/heads/address
- refs/heads/all-scalability-improvements
- refs/heads/beta/service-mesh
- refs/heads/bpf-metrics
- refs/heads/brb/brb-patch-2
- refs/heads/cilium-envoy-crd-pre-beta
- refs/heads/cilium-no-gopath
- refs/heads/cli-upgrade-v1.12-ci-test
- refs/heads/clustermesh511-upgrade-test
- refs/heads/committers-codeowners
- refs/heads/debug
- refs/heads/dev/joe/v1.8-with-hostfw-fixes
- refs/heads/enable_cnp_latency
- refs/heads/encrypt-node-fixes
- refs/heads/ensure-macos-build-succeeds
- refs/heads/envoy-policy-precedence
- refs/heads/envoy-warnings-cleanup
- refs/heads/extension-mysql
- refs/heads/feature/cep-scalability
- refs/heads/feature/devices-and-addresses
- refs/heads/feature/devices-reconciliation-v1.16
- refs/heads/feature/main/svc-icmp-response
- refs/heads/feature/service-refactor
- refs/heads/feature/service-refactor-fresh
- refs/heads/feature/v1.11/beta-test
- refs/heads/feature/v1.11/k8s-ingress
- refs/heads/fix-iphealth
- refs/heads/fqdn-fixl3-wildcard
- refs/heads/fristonio/iptables-manager-fix
- refs/heads/ft/main/chancez/push-dev-charts
- refs/heads/ft/main/push_chart_stable_branches_fix
- refs/heads/ft/main/test_push_chart_updates
- refs/heads/gce-example
- refs/heads/gh-readonly-queue/main/pr-27509-78a5f177693fb443cd946441f45826bf7fa2437a
- refs/heads/ginkgo-better-timeout
- refs/heads/graduation
- refs/heads/hf/main/ipam-pools-build-230605
- refs/heads/hf/master/v1.12-rc2-health-dbg-v1
- refs/heads/hf/master/wg-fix-ipam-k8s-v2
- refs/heads/hf/v1.10/cls-prio2
- refs/heads/hf/v1.10/debug-taint-removal
- refs/heads/hf/v1.10/v1.10.10-with-19452
- refs/heads/hf/v1.10/v1.10.2-fix-ipsec-ep-routes
- refs/heads/hf/v1.10/v1.10.5-with-identity-leak-fix
- refs/heads/hf/v1.10/v1.10.7-additional-logs
- refs/heads/hf/v1.10/v1.10.7-exclude-local
- refs/heads/hf/v1.10/v1.10.7-exclude-loopback
- refs/heads/hf/v1.10/v1.10.7-extra-logs
- refs/heads/hf/v1.10/v1.10.7-more-logs
- refs/heads/hf/v1.10/v1.10.8-deadlock-and-complexity-fix
- refs/heads/hf/v1.10/v1.10.8-deadlock-fix
- refs/heads/hf/v1.10/xdp-multidev-with-bpf-multihoming-and-egress-gw-fixes-v3
- refs/heads/hf/v1.10/xdp-multidev-with-bpf-multihoming-and-egress-gw-fixes-v4
- refs/heads/hf/v1.10/xdp-multidev-with-bpf-multihoming-and-egress-gw-fixes-v5
- refs/heads/hf/v1.10/xdp-multidev-with-bpf-multihoming-and-egress-gw-fixes-v6
- refs/heads/hf/v1.10/xdp-multidev-with-bpf-multihoming-and-egress-gw-fixes-v7
- refs/heads/hf/v1.11/1.11.4-custom-taint
- refs/heads/hf/v1.11/19247-custom-taint-key
- refs/heads/hf/v1.11/dbg-svc-restore
- refs/heads/hf/v1.11/v1.11.16-fix-xfrm-leak
- refs/heads/hf/v1.11/v1.11.16-fix-xfrm-leak-eni-attach-and-logging
- refs/heads/hf/v1.11/v1.11.16-fix-xfrm-leak-eni-attachment
- refs/heads/hf/v1.11/v1.11.3-with-19259
- refs/heads/hf/v1.11/v1.11.4-custom-taint
- refs/heads/hf/v1.11/v1.11.5-and-19247-eed5544
- refs/heads/hf/v1.11/xdp-multidev-v1
- refs/heads/hf/v1.11/xdp-multidev-v2-ipcache-fix
- refs/heads/hf/v1.12/next-net-v1
- refs/heads/hf/v1.12/v1.12.18-994
- refs/heads/hf/v1.12/v1.12.3-debug-k8s-heartbeat
- refs/heads/hf/v1.12/v1.12.3-debug-k8s-heartbeat-v2
- refs/heads/hf/v1.13/bpf-sock-l7-fix
- refs/heads/hf/v1.13/v1.13.12-without-deny-precedence
- refs/heads/hf/v1.13/v1.13.14-without-deny-precedence
- refs/heads/hf/v1.13/v1.13.14-without-deny-precedence-debug
- refs/heads/hf/v1.13/v1.13.14-without-deny-precedence-with-xfrm-fix
- refs/heads/hf/v1.13/v1.13.2-with-24875
- refs/heads/hf/v1.13/v1.13.3-with-26242
- refs/heads/hf/v1.14/cidr-identity-refcnt-fix
- refs/heads/hf/v1.14/v1.14-with-27327
- refs/heads/hf/v1.7/v1.7.15-with-neighbor-fix
- refs/heads/hf/v1.7/v1.7.15-with-neighbor-fix-2
- refs/heads/hf/v1.8/v1.8.13-with-19452
- refs/heads/hf/v1.8/v1.8.6-eni-cidr-fix-1
- refs/heads/hf/v1.8/v1.8.6-eni-cidr-fix-15303
- refs/heads/hf/v1.8/v1.8.7-with-fqdn-underscore-fix
- refs/heads/hf/v1.8/v1.8.8-eni-cidr-fix-1
- refs/heads/hf/v1.8/v1.8.8-with-encrypt-fixes
- refs/heads/hf/v1.9/v1.9.8-azure-ipam-fix
- refs/heads/hf/v1.9/v1.9.9-azure-pod-egress-fix
- refs/heads/hpabla/bgpv2/deprecate-localport
- refs/heads/images/runtime/20210830
- refs/heads/ipc-demo
- refs/heads/ktls-tx-only
- refs/heads/ktls-tx-only-v2
- refs/heads/ktls-tx-rx
- refs/heads/ktls-tx-rx-v2
- refs/heads/ktls-tx-rx-v3
- refs/heads/ktls-tx-rx-v4
- refs/heads/ktls-tx-rx-v5
- refs/heads/ldelossa/feat/bgp-control-plane
- refs/heads/ldelossa/keep-mark-definitions-consistent
- refs/heads/ldelossa/segment-makefiles
- refs/heads/ldelossa/segment-makefiles-v2
- refs/heads/ldelossa/srv6-encap-fib
- refs/heads/lizrice/pr/cli-confusion
- refs/heads/main
- refs/heads/mio/wireguard-restore-allowed-ips
- refs/heads/multi-stack-dev-vm
- refs/heads/pr/1-9-ci-test
- refs/heads/pr/aanm-update-k8s-conformance
- refs/heads/pr/aanm/bisect
- refs/heads/pr/add-controller-identity
- refs/heads/pr/aditighag/lrp-skip-lb
- refs/heads/pr/asauber/link-local-as-host
- refs/heads/pr/asauber/max-ifindex-metric
- refs/heads/pr/avoid-ct-for-dsr
- refs/heads/pr/backend-state
- refs/heads/pr/bbb-cpy
- refs/heads/pr/bimmlerd/modularize-bandwidth-manager
- refs/heads/pr/bimmlerd/v1.12-backport-quay-org-from-env
- refs/heads/pr/bounded-loops
- refs/heads/pr/bpf-based-masquerading
- refs/heads/pr/bpf-edt-proxy
- refs/heads/pr/brb/arping-nexthop
- refs/heads/pr/brb/arping-via-gw
- refs/heads/pr/brb/auto-multi-dev-v2
- refs/heads/pr/brb/backport-1.8.5-nat-gc
- refs/heads/pr/brb/bpf-host-routing-wg
- refs/heads/pr/brb/bpf-lxc-no-redirect
- refs/heads/pr/brb/bpf-masq-veth
- refs/heads/pr/brb/bpf-multihoming
- refs/heads/pr/brb/cgroup-v2-test
- refs/heads/pr/brb/check-errors-in-logs
- refs/heads/pr/brb/check-wg
- refs/heads/pr/brb/ci
- refs/heads/pr/brb/ci-1111
- refs/heads/pr/brb/ci-2
- refs/heads/pr/brb/ci-4.19
- refs/heads/pr/brb/ci-arping-flake
- refs/heads/pr/brb/ci-bigtcp
- refs/heads/pr/brb/ci-bpf-netdev-without-egress
- refs/heads/pr/brb/ci-cleanup-svc
- refs/heads/pr/brb/ci-dbg-conformance-kind
- refs/heads/pr/brb/ci-dbg-external
- refs/heads/pr/brb/ci-dbg-flake-from-outside
- refs/heads/pr/brb/ci-demo
- refs/heads/pr/brb/ci-disable-ces-for-egress-gw
- refs/heads/pr/brb/ci-dp-disable-bpf-host-routing
- refs/heads/pr/brb/ci-dp-hubble-flows
- refs/heads/pr/brb/ci-dp-more-diversity
- refs/heads/pr/brb/ci-dp-v1.13
- refs/heads/pr/brb/ci-dp-v6
- refs/heads/pr/brb/ci-dp-verifier
- refs/heads/pr/brb/ci-e2e-enable-debug-ipsec
- refs/heads/pr/brb/ci-e2e-geneve-dsr
- refs/heads/pr/brb/ci-e2e-helm-mode-v1.13
- refs/heads/pr/brb/ci-e2e-lvh-retry
- refs/heads/pr/brb/ci-e2e-more-nodes
- refs/heads/pr/brb/ci-e2e-new-cli
- refs/heads/pr/brb/ci-e2e-nft
- refs/heads/pr/brb/ci-e2e-unsafe
- refs/heads/pr/brb/ci-e2e-unsafe-v2
- refs/heads/pr/brb/ci-e2e-upgrade-tests
- refs/heads/pr/brb/ci-e2e-upgrade-tests-ipsec
- refs/heads/pr/brb/ci-early-terminate-conn-disrupt
- refs/heads/pr/brb/ci-eks-ipsec-upgrade
- refs/heads/pr/brb/ci-encrypt-l7
- refs/heads/pr/brb/ci-fix-ip-masq-dry-run
- refs/heads/pr/brb/ci-ipsec-upgrade-fix
- refs/heads/pr/brb/ci-ipsec-upgrade-missed-tail-calls
- refs/heads/pr/brb/ci-ipsec-upgrade-v1.13
- refs/heads/pr/brb/ci-ipsec-upgrade-vol2
- refs/heads/pr/brb/ci-keep-missed-tail-calls
- refs/heads/pr/brb/ci-l7-nodeport
- refs/heads/pr/brb/ci-lvh-4.19
- refs/heads/pr/brb/ci-lvh-5.4
- refs/heads/pr/brb/ci-lvh-5.4-v2
- refs/heads/pr/brb/ci-lvh-bpf-next
- refs/heads/pr/brb/ci-no-self-hosted
- refs/heads/pr/brb/ci-pass-kernel-env
- refs/heads/pr/brb/ci-prepull-l4lb
- refs/heads/pr/brb/ci-refactor-svc-suite
- refs/heads/pr/brb/ci-rm-smoke-tests
- refs/heads/pr/brb/ci-sanity
- refs/heads/pr/brb/ci-test
- refs/heads/pr/brb/ci-test-2
- refs/heads/pr/brb/ci-test-k8s-vsn-swap
- refs/heads/pr/brb/ci-test-large-runners
- refs/heads/pr/brb/ci-uffff
- refs/heads/pr/brb/ci-upgrade-vol-2
- refs/heads/pr/brb/ci-upgrade-vol-3
- refs/heads/pr/brb/ci-wg-mtu
- refs/heads/pr/brb/ci-wg-mtu-vol2
- refs/heads/pr/brb/cilium-host-v6-from-ipam
- refs/heads/pr/brb/cli-bump-test
- refs/heads/pr/brb/datapath-loop-dbg
- refs/heads/pr/brb/dbg-ci
- refs/heads/pr/brb/dbg-conformance-gke
- refs/heads/pr/brb/dbg-master-np-vxlan-ipcache-ci
- refs/heads/pr/brb/debug-nodeport-bpf-flake
- refs/heads/pr/brb/do-not-derive-pod-cidrs-from-dev
- refs/heads/pr/brb/do-not-query-dev-for-arping
- refs/heads/pr/brb/docs-clarify-egress-gw-ip-addr-dp
- refs/heads/pr/brb/drop-notify
- refs/heads/pr/brb/dsr
- refs/heads/pr/brb/dsr-v2
- refs/heads/pr/brb/dualstack-ci
- refs/heads/pr/brb/enable-ipv6-per-endpoint-routes
- refs/heads/pr/brb/enable-route-mtu-cni
- refs/heads/pr/brb/fib-lookup-src
- refs/heads/pr/brb/fix-backend-id-u32
- refs/heads/pr/brb/fix-ci-dp-deprecation-warn
- refs/heads/pr/brb/fix-clang-vsn-regexp
- refs/heads/pr/brb/fix-egress-ip-16147
- refs/heads/pr/brb/fix-external-ip-dp
- refs/heads/pr/brb/fix-maglev-del
- refs/heads/pr/brb/fix-nodeport-hostnetns
- refs/heads/pr/brb/fix-stale-dsr
- refs/heads/pr/brb/fix-svc-backend-selection
- refs/heads/pr/brb/fix-third-host
- refs/heads/pr/brb/gh-action-cgr
- refs/heads/pr/brb/gh-action-lvh
- refs/heads/pr/brb/gh-install-cli-backup
- refs/heads/pr/brb/ginkgo-kpr-strict
- refs/heads/pr/brb/ginkgo-rm-update-tests
- refs/heads/pr/brb/go-crazy
- refs/heads/pr/brb/hubble-tcp-ack-seq-no
- refs/heads/pr/brb/improve-svc-restore
- refs/heads/pr/brb/istio-getsockopt
- refs/heads/pr/brb/it-cannot-be-truth
- refs/heads/pr/brb/kpr-svc-mesh
- refs/heads/pr/brb/kubeproxy-free-ci
- refs/heads/pr/brb/l7-np-bpf
- refs/heads/pr/brb/l7-rerevert
- refs/heads/pr/brb/lets-be-friends-with-ipsec
- refs/heads/pr/brb/lvh-kind-127
- refs/heads/pr/brb/lvh-kind-ipsec-upgrade
- refs/heads/pr/brb/meyskens/auth-ep-gc-locks
- refs/heads/pr/brb/multi-network
- refs/heads/pr/brb/no-cache-snat
- refs/heads/pr/brb/no-rev-nat-bpf-lxc-ingress
- refs/heads/pr/brb/node-id-per-fam
- refs/heads/pr/brb/nodeport-xlr-flag
- refs/heads/pr/brb/perf-wg
- refs/heads/pr/brb/pin-lvh
- refs/heads/pr/brb/push-ci-charts
- refs/heads/pr/brb/pwru
- refs/heads/pr/brb/rm-arping-l2-addr-check
- refs/heads/pr/brb/rm-no-redirect
- refs/heads/pr/brb/rm-np-deadcode
- refs/heads/pr/brb/rm-partial-host-svc
- refs/heads/pr/brb/rm-test-gke
- refs/heads/pr/brb/test-bpf-masq
- refs/heads/pr/brb/test-ci-e2e
- refs/heads/pr/brb/test-ci-e2e-v1.13
- refs/heads/pr/brb/test-kind
- refs/heads/pr/brb/third-host-more-pain
- refs/heads/pr/brb/timing-l4lb-gh-action
- refs/heads/pr/brb/triage-flake-v2
- refs/heads/pr/brb/triage-lb-flake
- refs/heads/pr/brb/unquarantine-svc
- refs/heads/pr/brb/v1.10-istio-snat
- refs/heads/pr/brb/v1.12-ci-e2e
- refs/heads/pr/brb/v1.12-ci-ipsec-upgrade
- refs/heads/pr/brb/v1.12-test-ipsec-upgrade
- refs/heads/pr/brb/v1.13-ci-e2e
- refs/heads/pr/brb/v1.13-remote-np
- refs/heads/pr/brb/v1.13-upgrade-fixes
- refs/heads/pr/brb/v1.14-ci-e2e-upgrade
- refs/heads/pr/brb/v1.14-drop-notify
- refs/heads/pr/brb/v1.15-enable-route-mtu-cni
- refs/heads/pr/brb/v1.6.9-iptables-W
- refs/heads/pr/brb/v1.8-fix-icmp-port-check
- refs/heads/pr/brb/wg-duplicate-node-ip
- refs/heads/pr/brb/wg-encrypt-node-test
- refs/heads/pr/brb/wg-hack
- refs/heads/pr/brb/wg-ipam-fix
- refs/heads/pr/brb/wg-kpr
- refs/heads/pr/brb/wg-test
- refs/heads/pr/brb/wip
- refs/heads/pr/brb/wip-ci
- refs/heads/pr/brb/wip-sync-policy-map
- refs/heads/pr/brb/xdp-egress-gw
- refs/heads/pr/brb/xdp-multidev-with-bpf-multihoming
- refs/heads/pr/brb/xdp-multidev-with-bpf-multihoming-v2
- refs/heads/pr/bruno/sleepy-pawn
- refs/heads/pr/bugtool-systemd
- refs/heads/pr/bwm-base2
- refs/heads/pr/bwm-fq
- refs/heads/pr/bwm-priority
- refs/heads/pr/chancez/add_hubble_l7_dashboard_prometheus_example
- refs/heads/pr/chancez/fix_websocket_l7_policies
- refs/heads/pr/chancez/flow_filter_namespace
- refs/heads/pr/chancez/hubble_plus_plus
- refs/heads/pr/chancez/hubble_tls_validation_troubleshooting
- refs/heads/pr/chancez/static_peers_hubble_relay
- refs/heads/pr/christarazi/controlplane-fqdn
- refs/heads/pr/christarazi/ipcache-async-cep-pods-namedports
- refs/heads/pr/christarazi/prep-from-cidr-tests
- refs/heads/pr/ci-k8s-1.30
- refs/heads/pr/datapath-opt
- refs/heads/pr/dbkm/nodeport-lb
- refs/heads/pr/debug-dns-timeout
- refs/heads/pr/eproutes-redir
- refs/heads/pr/example/neigh-state-manager
- refs/heads/pr/fastdp
- refs/heads/pr/fastdp2
- refs/heads/pr/feroz/allow-sbom-read
- refs/heads/pr/feroz/set-container-scan-failure-flag
- refs/heads/pr/feroz/test-cosign-attest
- refs/heads/pr/fib-consolidation
- refs/heads/pr/fix-aks-workflow
- refs/heads/pr/fix-data-race
- refs/heads/pr/fix-k8s-all-sha1
- refs/heads/pr/fix-pod-pacing
- refs/heads/pr/fix-tail-call-replace
- refs/heads/pr/fristonio/feat-19038
- refs/heads/pr/fristonio/fix-istio-k8sT
- refs/heads/pr/fristonio/ipv6-masquerading
- refs/heads/pr/fristonio/test-dual-stack
- refs/heads/pr/fristonio/test-ipv6-dualstack
- refs/heads/pr/gandro+brb/fix-monitor-aggregation-np-v2
- refs/heads/pr/gandro+brb/mv-trace-point-to-rev-nodeport
- refs/heads/pr/gandro+brb/wg-host-encryption-v3
- refs/heads/pr/gandro+brb/wg-host2host
- refs/heads/pr/gandro+brb/wg-host2host-kind
- refs/heads/pr/gandro/bump-hubble-2020-03-25
- refs/heads/pr/gandro/ci-conformance-multicluster-fix-log-gathering
- refs/heads/pr/gandro/ci-delete-crds-in-cleanupcomponents
- refs/heads/pr/gandro/ci-fix-status-if-workflows-are-skipped
- refs/heads/pr/gandro/ci-wait-for-all-relevant-images-do-not-merge-test
- refs/heads/pr/gandro/enable-hubble-by-default
- refs/heads/pr/gandro/portmap-refcount
- refs/heads/pr/gandro/re-enable-wireguard-in-multicluster-ci
- refs/heads/pr/gandro/svc-healthchecknodeport
- refs/heads/pr/gc-on-svc-update
- refs/heads/pr/getname-hooks
- refs/heads/pr/giorio94/1.14/test-cilium-cli-2184
- refs/heads/pr/giorio94/main/cluster-name-validation-strict
- refs/heads/pr/giorio94/main/gha-cluster-name
- refs/heads/pr/giorio94/main/gha-conformance-clustermesh-lb
- refs/heads/pr/giorio94/main/test-cilium-cli-2184
- refs/heads/pr/giorio94/main/tests-clustermesh-upgrade-interrupted
- refs/heads/pr/giorio94/v1.13/bump-gke-version
- refs/heads/pr/gray/30837-with-pwru
- refs/heads/pr/gray/ipsec-proxy-kpr-revdnat-test
- refs/heads/pr/gray/main/connectivity-wg-proxy-nodeport
- refs/heads/pr/gray/main/decouple-ipsec-gh-actions
- refs/heads/pr/gray/main/egress-proxy-ipsec-fix2
- refs/heads/pr/gray/main/fix-leak-detection-race
- refs/heads/pr/gray/main/xfrm-delete-flake
- refs/heads/pr/gray/main/xfrm-delete-flake2
- refs/heads/pr/gray/new-cli-test-pr-2759
- refs/heads/pr/gray/pwru-action
- refs/heads/pr/gray/v1.15/decouple-ipsec-gh-actions
- refs/heads/pr/health-data-path
- refs/heads/pr/hubble-tls-cert-gen-via-k8s-job
- refs/heads/pr/ianvernon/kvstore-client-type
- refs/heads/pr/ianvernon/kvstore-context
- refs/heads/pr/ianvernon/more-endpoint-cleanup
- refs/heads/pr/ianvernon/resolve-cidr-policy-perf-improvement
- refs/heads/pr/increase-verifier-test-build-timeout
- refs/heads/pr/ipip
- refs/heads/pr/ipip-encap
- refs/heads/pr/ipip-encap2
- refs/heads/pr/ipip2
- refs/heads/pr/ipip4
- refs/heads/pr/ipip6
- refs/heads/pr/jibi/differentiate-udp-tcp-svcs-take-4
- refs/heads/pr/jibi/fix-differentiate-udp-tcp-svc-upgrade
- refs/heads/pr/jibi/ip-list-contains-addr
- refs/heads/pr/jibi/wip
- refs/heads/pr/joamaki/gather-network-info
- refs/heads/pr/joamaki/idless-service-restapi
- refs/heads/pr/joe/ariane-scheduled-cilium-only
- refs/heads/pr/joe/backport-28007-1.11
- refs/heads/pr/joe/bump-ginkgo-seed
- refs/heads/pr/joe/docker-build-log-tracing
- refs/heads/pr/joe/docs-builder-latex
- refs/heads/pr/joe/docs-workflow-repo+test
- refs/heads/pr/joe/initialize-helm-flags
- refs/heads/pr/joe/ipcache-cidr-policy
- refs/heads/pr/joe/lost-identity
- refs/heads/pr/joe/release-codeowners
- refs/heads/pr/joe/sw-quay
- refs/heads/pr/joe/test-labeler
- refs/heads/pr/joe/test-lvh-fix
- refs/heads/pr/joe/v1.13-stability-check
- refs/heads/pr/joe/v1.7-dev-env
- refs/heads/pr/jrajahalme/gh-filter-test-files
- refs/heads/pr/jrfastab/backport-ooo-ipsec-fixes
- refs/heads/pr/jrfastab/backport-v115
- refs/heads/pr/jrfastab/dbgNodeId
- refs/heads/pr/jrfastab/dbgNodeId111
- refs/heads/pr/jrfastab/dbgNodeId111v2
- refs/heads/pr/jrfastab/dbgv114
- refs/heads/pr/jrfastab/eks-encrypt-ipamupdate
- refs/heads/pr/jrfastab/fix-encrypt-subnets
- refs/heads/pr/jrfastab/fix-ixsec-vxlan-remoteIP
- refs/heads/pr/jrfastab/fixes-ipsec-init
- refs/heads/pr/jrfastab/v1.8-fix-ipsec-vxlan-remoteIP
- refs/heads/pr/jrfastab/v1.9-fix-ipsec-vxlan-remoteIP
- refs/heads/pr/jrfastab/v111-debug-ooo
- refs/heads/pr/jrfastab/v111-debug-ooo-v2
- refs/heads/pr/jwi/main/bpf-dsr-geneve
- refs/heads/pr/jwi/main/ci-e2e-upgrade
- refs/heads/pr/jwi/main/ci-geneve-dsr
- refs/heads/pr/jwi/main/ipsec-rhel8
- refs/heads/pr/jwi/main/ipv6-ci
- refs/heads/pr/jwi/v1.14/foo
- refs/heads/pr/jwi/v1.15/bpf-complexity
- refs/heads/pr/jwi/v1.16/tophat
- refs/heads/pr/k8s-nat46x64
- refs/heads/pr/k8s-nat46x64-2
- refs/heads/pr/kaworu/helm-hubble-cli.yaml
- refs/heads/pr/kkourt/azure-ipam-test-race
- refs/heads/pr/kkourt/bpftool-update
- refs/heads/pr/kkourt/ct-rst-timeout-wip
- refs/heads/pr/kkourt/v1.11-backport-2022-01-26
- refs/heads/pr/kkourt/v1.9-lxc-complexity
- refs/heads/pr/l4lb-improvements-tmp
- refs/heads/pr/learnitall/ginkgo-race-workflow
- refs/heads/pr/learnitall/init-egw-scale-test
- refs/heads/pr/learnitall/test-startup-script-changes
- refs/heads/pr/lmb/1.14-cni
- refs/heads/pr/lmb/1.15-cni
- refs/heads/pr/lmb/update-cni-plugin
- refs/heads/pr/marga/v1.11-without-deny-precedence
- refs/heads/pr/marseel/improve_net_perf
- refs/heads/pr/marseel/scale_test_1_15
- refs/heads/pr/max/upgrade-llvm-18-1-6
- refs/heads/pr/mhofstetter/guestbook-registry
- refs/heads/pr/mhofstetter/junit-fetch-nullglob
- refs/heads/pr/mhofstetter/ssh-store-consolelog
- refs/heads/pr/mhofstetter/test-ingress
- refs/heads/pr/michi/circular-struggle
- refs/heads/pr/michi/crdregister
- refs/heads/pr/michi/debug
- refs/heads/pr/michi/description
- refs/heads/pr/michi/dns-refactor12
- refs/heads/pr/michi/faster
- refs/heads/pr/michi/l7drop
- refs/heads/pr/michi/majestic-ketchup
- refs/heads/pr/michi/mega-ketchup
- refs/heads/pr/michi/peerapi
- refs/heads/pr/michi/sleep-on-it
- refs/heads/pr/michi/test
- refs/heads/pr/michi/weekly-bot
- refs/heads/pr/monitor-wait-ci
- refs/heads/pr/move-image-to-one-repo
- refs/heads/pr/nat-gw-tests
- refs/heads/pr/nathanjsweet/add-complex-allow-test-to-policy-map-tests
- refs/heads/pr/nathanjsweet/add-lockdown-mode-for-policy-map-overflows
- refs/heads/pr/nathanjsweet/differentiate-protocol-in-services
- refs/heads/pr/nathanjsweet/node-port-addresses
- refs/heads/pr/nathanjsweet/refactor-has-same-owners
- refs/heads/pr/nathanjsweet/refactor-mapstate
- refs/heads/pr/nathanjsweet/update-k8s-control-plane-tests-to-1-27
- refs/heads/pr/nebril/add-dns-concurrency-limit
- refs/heads/pr/nebril/fix-precheck
- refs/heads/pr/nebril/fqdn-proxy-ha
- refs/heads/pr/nebril/fqdn-proxy-interface
- refs/heads/pr/nebril/gke-workflow-migrate-from-cli
- refs/heads/pr/nebril/quarantine-1.14-nodeport
- refs/heads/pr/nebril/test-bottlerocket
- refs/heads/pr/nebril/test-helm-gke-fix
- refs/heads/pr/nebril/test-our-ghaction-shenanigans
- refs/heads/pr/nebril/test-rebase-helm
- refs/heads/pr/nebril/trololo
- refs/heads/pr/nebril/update-cli-9.1-test
- refs/heads/pr/netkit
- refs/heads/pr/netkit3
- refs/heads/pr/netns-switch
- refs/heads/pr/netns-switch-no-peer
- refs/heads/pr/nodeport-fix
- refs/heads/pr/nodeport-improvements2
- refs/heads/pr/nodeport-nat-improvements
- refs/heads/pr/nodeport-nat-improvements2
- refs/heads/pr/nodeport-retry-sport
- refs/heads/pr/pchaigno/deprecate-bpf_network-f
- refs/heads/pr/pchaigno/fix-4.19-bpf-program-size
- refs/heads/pr/pchaigno/hotfix1-ipsec-fix
- refs/heads/pr/pchaigno/hotfix1-ipsec-fix-brb-v0
- refs/heads/pr/pchaigno/optim-complexity-ipcache-lookup
- refs/heads/pr/pchaigno/rework-config-probes
- refs/heads/pr/pchaigno/tmp-base-branch
- refs/heads/pr/pin-1.10-workflows-k8s-version
- refs/heads/pr/pin-1.11-workflows-k8s-version
- refs/heads/pr/pin-1.12-workflows-k8s-version
- refs/heads/pr/pin-1.13-workflows-k8s-version
- refs/heads/pr/pin-cloud-provider-master-workflows
- refs/heads/pr/pr/fix-ipam-node-manager-semaphore-error-handling
- refs/heads/pr/publish-test-images
- refs/heads/pr/qmonnet/docs-20230224
- refs/heads/pr/qmonnet/docs-bump
- refs/heads/pr/qmonnet/standalone-lb-docs
- refs/heads/pr/ray/late-dns-proxy
- refs/heads/pr/remove-1.13-references
- refs/heads/pr/rgo3/1.12-run-no-unexpected-drops-for-patch
- refs/heads/pr/rgo3/fix-k8s-vm-provisioning-1.13
- refs/heads/pr/rgo3/fix-missing-health-endpoint
- refs/heads/pr/rolinh/better-policy-verdict
- refs/heads/pr/rolinh/hubble-dump-all
- refs/heads/pr/rolinh/hubble-fix-maxflows-rounding
- refs/heads/pr/route-test
- refs/heads/pr/run-tests-in-parallel
- refs/heads/pr/scalability-crd-only
- refs/heads/pr/squeed/make-ccache
- refs/heads/pr/squeed/per-node-config
- refs/heads/pr/squeed/remote-cluster-leak
- refs/heads/pr/stacy/docs-update
- refs/heads/pr/tammach/accesslog-envoy
- refs/heads/pr/tammach/ci-cm
- refs/heads/pr/tammach/cleanup-helm-1.16
- refs/heads/pr/tammach/headless-service-flake
- refs/heads/pr/tammach/ingress-controller-e2e-config6
- refs/heads/pr/tammach/kind-host-dns-again
- refs/heads/pr/tammach/more-ingress-tests
- refs/heads/pr/tammach/rennovate-statedb
- refs/heads/pr/tammach/revert/fib-lookup
- refs/heads/pr/tammach/upgrade-test-ingress
- refs/heads/pr/tc-np-test
- refs/heads/pr/tcx
- refs/heads/pr/tcx-helm
- refs/heads/pr/tcx-misc
- refs/heads/pr/test-419-ci
- refs/heads/pr/test-increase-update-delete-timeout
- refs/heads/pr/test-k8s-all-tests
- refs/heads/pr/test-lb-super-netperf
- refs/heads/pr/test-nightly
- refs/heads/pr/test-upstream-timeout
- refs/heads/pr/tgraf/chaos-testing
- refs/heads/pr/tgraf/clustermesh-stale-state
- refs/heads/pr/tgraf/eni-ipam
- refs/heads/pr/tgraf/new-endpoint-state
- refs/heads/pr/tgraf/new-policy
- refs/heads/pr/tgraf/remove-tunnel-map
- refs/heads/pr/tgraf/scoped-ipam
- refs/heads/pr/tgraf/sctp
- refs/heads/pr/tgraf/split-lxc-prog
- refs/heads/pr/thorn3r/cesBlanketTest
- refs/heads/pr/thorn3r/clustermesh511
- refs/heads/pr/thorn3r/scaleTest5k
- refs/heads/pr/tklauser/build-push-images-env-var
- refs/heads/pr/tklauser/netipx-switch
- refs/heads/pr/tklauser/replace-k8s-strings-slices
- refs/heads/pr/tommyp1ckles/debugging-aks-conformance
- refs/heads/pr/tp/add-logging-for-integration-etcd
- refs/heads/pr/tp/add-logging-for-wait-for-pods-term-condition
- refs/heads/pr/tp/backport-31380
- refs/heads/pr/tp/bump-cilium-cli
- refs/heads/pr/tp/cleanup-ipam-ips-metric-docs
- refs/heads/pr/tp/complexity-issue-verifier-case-main
- refs/heads/pr/tp/dont-terminate-on-node-config-changee
- refs/heads/pr/tp/eps-modular-health
- refs/heads/pr/tp/fix-stuck-ginko-pod-v2
- refs/heads/pr/tp/forward-hubble-for-e2e
- refs/heads/pr/tp/forward-hubble-for-e2e-v2
- refs/heads/pr/tp/make-nat-purge-async
- refs/heads/pr/tp/preload-test-kind-images
- refs/heads/pr/tp/switch-1.24-eks-region
- refs/heads/pr/tp/switch-1.24-eks-region-v1.13
- refs/heads/pr/tp/use-helm-default-vars-for-clustermesh-downgrade-c1
- refs/heads/pr/tweak-github-action-ref
- refs/heads/pr/twpayne/hubble-recent-events-buffer
- refs/heads/pr/twpayne/hubble-ring-buffer-benchmarks
- refs/heads/pr/update-azure
- refs/heads/pr/update-readme-for-releases
- refs/heads/pr/update-tm-network
- refs/heads/pr/v1.10-backport-2022-06-13
- refs/heads/pr/v1.10-backport-2022-10-03
- refs/heads/pr/v1.10-eni-stability-improvements-v1
- refs/heads/pr/v1.10-neigh-clean
- refs/heads/pr/v1.11-backport-2022-10-03
- refs/heads/pr/v1.11-test/issue-692
- refs/heads/pr/v1.12-backport-2023-10-10
- refs/heads/pr/v1.12-test/issue-692
- refs/heads/pr/v1.13-backport-2023-10-31
- refs/heads/pr/v1.13-backport-2024-04-22-03-42
- refs/heads/pr/v1.13-test/issue-692
- refs/heads/pr/v1.14-backport-2024-06-18-02-46
- refs/heads/pr/v1.14.1
- refs/heads/pr/v1.7-stability-test
- refs/heads/pr/v1.7.9-hf-13205
- refs/heads/pr/v3-cpu
- refs/heads/pr/v6-host-addr2
- refs/heads/pr/vk/bpf/csum
- refs/heads/pr/vk/bpf/test/l4/csum
- refs/heads/pr/vk/bpf/tests/csum
- refs/heads/pr/vk/conn/test/hooks
- refs/heads/pr/vk/doc/ipsec
- refs/heads/pr/vk/eks/tests/concurrent/run
- refs/heads/pr/vk/ipsec/key/rotate
- refs/heads/pr/vk/ipsec/tests/concurrency
- refs/heads/pr/wip/bijective-nodemap
- refs/heads/regex_improved
- refs/heads/renovate/main-all-go-deps-main
- refs/heads/renovate/main-go
- refs/heads/renovate/main-golangci-lint
- refs/heads/renovate/main-patch-all-lvh-images-main
- refs/heads/renovate/v1.13-go
- refs/heads/renovate/v1.14-patch-stable-lvh-images
- refs/heads/renovate/v1.15-aanm-test
- refs/heads/renovate/v1.15-patch-stable-lvh-images
- refs/heads/renovate/v1.16-cilium-cli
- refs/heads/renovate/v1.16-go
- refs/heads/renovate/v1.16-patch-stable-lvh-images
- refs/heads/revert-29086-2023-11-09-backport-1.14
- refs/heads/revert-33302-policy-catch-invalid-port-wildcard
- refs/heads/rib
- refs/heads/run-ci-wihout-building-cilium
- refs/heads/service-over-srv6-main3
- refs/heads/sh-dep-test-l4lb
- refs/heads/sidecar-http-proxy
- refs/heads/sockmap-v5
- refs/heads/sockops-build-fix
- refs/heads/tam/integration-tests
- refs/heads/tam/more-ingress-tests
- refs/heads/tb/bpf-remove-bear
- refs/heads/test-branch
- refs/heads/test-ipsec
- refs/heads/test-sig-bgp-notifs
- refs/heads/test/brlbil/upload
- refs/heads/test/skip-workflows
- refs/heads/tgraf/process-policy
- refs/heads/thorn3r/cesScaleTest
- refs/heads/thorn3rCES
- refs/heads/tinker/learnitall/scale-test-1
- refs/heads/tinker/learnitall/scale-test-2
- refs/heads/tklauser+brb/wip/multi-homing
- refs/heads/unit-test-ipsec
- refs/heads/v0.10
- refs/heads/v0.11
- refs/heads/v0.12
- refs/heads/v0.13
- refs/heads/v0.8
- refs/heads/v0.9
- refs/heads/v1.0
- refs/heads/v1.0.0-rc2
- refs/heads/v1.0.0-rc3
- refs/heads/v1.1
- refs/heads/v1.10
- refs/heads/v1.11
- refs/heads/v1.12
- refs/heads/v1.12.11-base
- refs/heads/v1.13
- refs/heads/v1.14
- refs/heads/v1.15
- refs/heads/v1.16
- refs/heads/v1.2
- refs/heads/v1.3
- refs/heads/v1.3.1
- refs/heads/v1.3.1-release
- refs/heads/v1.3.7-release
- refs/heads/v1.4
- refs/heads/v1.4.5-release
- refs/heads/v1.5
- refs/heads/v1.5.2-rc1-with-clusterip-fix
- refs/heads/v1.5.4-release
- refs/heads/v1.6
- refs/heads/v1.7
- refs/heads/v1.7.9-1
- refs/heads/v1.7.9.1
- refs/heads/v1.8
- refs/heads/v1.9
- refs/heads/verify-external-workload-dns-setup-redux
- refs/heads/vladu/identity-type-metrics
- refs/heads/weavescope
- refs/heads/wip-debug-link-not-found
- refs/heads/wip-debug-link-not-found-v2
- refs/heads/wip-ktls-tx-rx
- refs/heads/wip-sockmap
- refs/heads/wip-sockmap-v2
- refs/heads/wip-sockmap-v3
- refs/heads/wip-sockmap-v4
- refs/heads/xfrm-subnet-test
- refs/heads/yutaro/bgp-cplane-etp-local/doc
- refs/heads/yutaro/oss/eni-overlapping-mark
- refs/remotes/bruno/hf/v1.10/v1.10.3-bpf-snat-and-masq-fixes
- refs/remotes/joe/submit/quarantine-etcd
- refs/remotes/origin/1.2-backports-18-09-12
- refs/remotes/origin/ipvlan3
- refs/remotes/origin/pr/add-reserved-health
- refs/remotes/origin/pr/brb/nodeport-lb
- refs/remotes/origin/pr/ianvernon/5859
- refs/remotes/origin/pr/ianvernon/dynamic-ep-cfg
- refs/remotes/origin/pr/tgraf/kube-dns-fixed-identity
- refs/semaphoreci/6384f501b324813e55cfbe818c04a40f2a923765
- refs/semaphoreci/7f69b285bac8a1be414e8769799962ae1408d9e1
- refs/semaphoreci/b5eb6622da121ad36b8f375a084392f7feeec64a
- refs/semaphoreci/d9e7e28f39d34a7050a9c1cad2a26d84f5f4eff1
- refs/semaphoreci/f55ec535d85f387ef981265967fabb3c1b5f1ec6
- refs/tags/0.10.1
- refs/tags/1.1.1
- refs/tags/1.9.0-rc0
- refs/tags/v0.11
- refs/tags/v0.12.0
- refs/tags/v0.13.1
- Branches list truncated to 702 entries, 10 were omitted.
- v0.13.2
- v0.13.19
- v0.13.18
- v0.13.17
- v0.13.16
- v0.13.15
- v0.13.14
- v0.13.13
- v0.13.12
- v0.13.11
- v0.13.10
- v0.10.0
- 1.9.9
- 1.9.8
- 1.9.7
- 1.9.6
- 1.9.5
- 1.9.4
- 1.9.3
- 1.9.2
- 1.9.18
- 1.9.17
- 1.9.16
- 1.9.15
- 1.9.14
- 1.9.13
- 1.9.12
- 1.9.11
- 1.9.10
- 1.9.1
- 1.9.0-rc3
- 1.9.0-rc2
- 1.9.0-rc1
- 1.9.0
- 1.8.9
- 1.8.8
- 1.8.7
- 1.8.6
- 1.8.5
- 1.8.4
- 1.8.3
- 1.8.2
- 1.8.13
- 1.8.12
- 1.8.11
- 1.8.10
- 1.8.1
- 1.8.0-rc4
- 1.8.0-rc3
- 1.8.0-rc2
- 1.8.0-rc1
- 1.8.0
- 1.7.9
- 1.7.8
- 1.7.7
- 1.7.6
- 1.7.5
- 1.7.4
- 1.7.3
- 1.7.2
- 1.7.16
- 1.7.15
- 1.7.14
- 1.7.13
- 1.7.12
- 1.7.11
- 1.7.10
- 1.7.1
- 1.7.0-rc4
- 1.7.0-rc3
- 1.7.0
- 1.6.9
- 1.6.8
- 1.6.7
- 1.6.6
- 1.6.5
- 1.6.4
- 1.6.3
- 1.6.2
- 1.6.12
- 1.6.11
- 1.6.10
- 1.6.1
- 1.6.0
- 1.5.9
- 1.5.8
- 1.5.7
- 1.5.6
- 1.5.5
- 1.5.4
- 1.5.3
- 1.5.2
- 1.5.13
- 1.5.12
- 1.5.11
- 1.5.10
- 1.5.1
- 1.5.0-rc6
- 1.5.0-rc5
- 1.5.0-rc4
- 1.5.0-rc3
- 1.5.0-rc2
- 1.5.0
- 1.4.9
- 1.4.8
- 1.4.7
- 1.4.6
- 1.4.5
- 1.4.4
- 1.4.3
- 1.4.2
- 1.4.10
- 1.4.1
- 1.4.0-rc9
- 1.4.0-rc8
- 1.4.0-rc7
- 1.4.0-rc6
- 1.4.0-rc5
- 1.4.0-rc2
- 1.4.0
- 1.3.8
- 1.3.7
- 1.3.6
- 1.3.5
- 1.3.4
- 1.3.3
- 1.3.2
- 1.3.1
- 1.3.0-rc5
- 1.3.0-rc4
- 1.3.0
- 1.2.8
- 1.2.7
- 1.2.6
- 1.2.5
- 1.2.4
- 1.2.3
- 1.2.2
- 1.2.1
- 1.2.0-rc3
- 1.2.0-rc2
- 1.2.0-rc1
- 1.2.0
- 1.16.1
- 1.16.0-rc.2
- 1.16.0-rc.1
- 1.16.0-rc.0
- 1.16.0-pre.3
- 1.16.0-pre.2
- 1.16.0-pre.1
- 1.16.0-pre.0
- 1.16.0
- 1.15.8
- 1.15.7
- 1.15.6
- 1.15.5
- 1.15.4
- 1.15.3
- 1.15.2
- 1.15.1
- 1.15.0-rc.1
- 1.15.0-rc.0
- 1.15.0-pre.3
- 1.15.0-pre.2
- 1.15.0-pre.1
- 1.15.0-pre.0
- 1.15.0
- 1.14.9
- 1.14.8
- 1.14.7
- 1.14.6
- 1.14.5
- 1.14.4
- 1.14.3
- 1.14.2
- 1.14.14
- 1.14.13
- 1.14.12
- 1.14.11
- 1.14.10
- 1.14.1
- 1.14.0-snapshot.4
- 1.14.0-snapshot.3
- 1.14.0-snapshot.2
- 1.14.0-snapshot.1
- 1.14.0-snapshot.0
- 1.14.0-rc.1
- 1.14.0-rc.0
- 1.14.0-pre.2
- 1.14.0
- 1.13.9
- 1.13.8
- 1.13.7
- 1.13.6
- 1.13.5
- 1.13.4
- 1.13.3
- 1.13.2
- 1.13.18
- 1.13.17
- 1.13.16
- 1.13.15
- 1.13.14
- 1.13.13
- 1.13.12
- 1.13.11
- 1.13.10
- 1.13.1
- 1.13.0-rc5
- 1.13.0-rc4
- 1.13.0-rc3
- 1.13.0-rc2
- 1.13.0-rc1
- 1.13.0-rc0
- 1.13.0
- 1.12.9
- 1.12.8
- 1.12.7
- 1.12.6
- 1.12.5
- 1.12.4
- 1.12.3
- 1.12.2
- 1.12.19
- 1.12.18
- 1.12.17
- 1.12.16
- 1.12.15
- 1.12.14
- 1.12.13
- 1.12.12
- 1.12.11
- 1.12.10
- 1.12.1
- 1.12.0-rc3
- 1.12.0-rc2
- 1.12.0-rc1
- 1.12.0-rc0
- 1.12.0
- 1.11.9
- 1.11.8
- 1.11.7
- 1.11.6
- 1.11.5
- 1.11.4
- 1.11.3
- 1.11.20
- 1.11.2
- 1.11.19
- 1.11.18
- 1.11.17
- 1.11.16
- 1.11.15
- 1.11.14
- 1.11.13
- 1.11.12
- 1.11.11
- 1.11.10
- 1.11.1
- 1.11.0-rc3
- 1.11.0-rc2
- 1.11.0-rc1
- 1.11.0-rc0
- 1.11.0
- 1.10.9
- 1.10.8
- 1.10.7
- 1.10.6
- 1.10.5
- 1.10.4
- 1.10.3
- 1.10.20
- 1.10.2
- 1.10.19
- 1.10.18
- 1.10.17
- 1.10.16
- 1.10.15
- 1.10.14
- 1.10.13
- 1.10.12
- 1.10.11
- 1.10.10
- 1.10.1
- 1.10.0-rc2
- 1.10.0-rc1
- 1.10.0-rc0
- 1.10.0
- 1.1.6
- 1.1.5
- 1.1.4
- 1.1.3
- 1.1.2
- 1.1.0
- 1.0.7
- 1.0.6
- 1.0.5
- 1.0.4
- v1.1.2
- Releases list truncated to 299 entries, 349 were omitted.
Take a new snapshot of a software origin
If the archived software origin currently browsed is not synchronized with its upstream version (for instance when new commits have been issued), you can explicitly request Software Heritage to take a new snapshot of it.
Use the form below to proceed. Once a request has been submitted and accepted, it will be processed as soon as possible. You can then check its processing state by visiting this dedicated page.![swh spinner](/static/img/swh-spinner.gif)
Processing "take a new snapshot" request ...
Permalinks
To reference or cite the objects present in the Software Heritage archive, permalinks based on SoftWare Hash IDentifiers (SWHIDs) must be used.
Select below a type of object currently browsed in order to display its associated SWHID and permalink.
Revision | Author | Date | Message | Commit Date |
---|---|---|---|---|
ff97b30 | Ian Vernon | 03 August 2018, 21:41:30 UTC | Prepare for release v1.1.2 c5226b6d41bbdee661663e8b716d502e256ba6d6 prepared for release v1.1.2, but the Cilium team decided to backport a few more fixes and fold them into this release; since v1.1.2 was not officially released via GitHub nor on Slack, we can do this. Signed-off by: Ian Vernon <ian@cilium.io> | 04 August 2018, 00:53:26 UTC |
71cb75d | Jarno Rajahalme | 03 August 2018, 00:21:10 UTC | envoy: Sanitize HTTP headers [ upstream commit 9bb35ec59bf4809b3336fab61ea5f515ec5786d5 ] Remove HTTP headers that might interfere with the original destination processing. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> | 03 August 2018, 20:50:15 UTC |
ceb5902 | Thomas Graf | 02 August 2018, 11:37:32 UTC | bpffs: Cache mountinfo result [ upstream commit dd43f1e36b8418793922426633bf390aa3b95f6c ] Scanning /proc/self/mountinfo whenever a map is opening is expensive as the string scanning is CPU intesive. Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 03 August 2018, 20:00:02 UTC |
6bc29f4 | Thomas Graf | 02 August 2018, 10:15:22 UTC | monitor: Fix spin loop when reading stdout from monitor fails [ upstream commit 45aea8b9963bafc759a7ba16825c81c5f35a1c86 ] The following pprof cpu trace was observed: ``` flat flat% sum% cum cum% 6670ms 32.97% 32.97% 7650ms 37.82% syscall.Syscall 2270ms 11.22% 44.19% 3290ms 16.26% runtime.scanobject 1690ms 8.35% 52.55% 4300ms 21.26% runtime.mallocgc 910ms 4.50% 57.04% 910ms 4.50% runtime.heapBitsForObject 680ms 3.36% 60.41% 680ms 3.36% runtime.greyobject 560ms 2.77% 63.17% 560ms 2.77% runtime.memclrNoHeapPointers 460ms 2.27% 65.45% 460ms 2.27% runtime.heapBitsSetType 430ms 2.13% 67.57% 490ms 2.42% runtime.ifaceeq 300ms 1.48% 69.06% 10450ms 51.66% bufio.(*Reader).ReadSlice 300ms 1.48% 70.54% 300ms 1.48% runtime.casgstatus ``` The cause seems lack of error handling of `ReadBytes()` so an EOF on the pipe will result in the for loop spinning forever. Also fix up invalid calls to Fatalf() and instead restart the monitor when creation of the pipe fails. The last fix is to have launcher.Run() return an error if the command cannot be started so we can restart the monitor properly if we can't execute it at first. Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 03 August 2018, 20:00:02 UTC |
1a9c488 | Ian Vernon | 11 June 2018, 22:03:48 UTC | daemon: refactor updating of CNP Node Status [ upstream commit ab76b79b4c384cab48beb4954d3cd213f64b5ba3 ] * update annotations if CNP rule spec has not changed: previously, if a user updated the annotations for a rule, but did not update the \`spec\` or \`specs\` fields, the logic in the daemon would short circuit updating the rule in the local repository within Cilium to avoid unneeded and costly policy recalculation. This meant that the annotations would not be updated. Add logic to update the annotations if they have changed even if the rule's \`spec\` or \`specs\` have not changed. Also ensure that we create a deep copy of the annotations when adding a rule into the Cilium repository. * factor out updating of the CiliumNetworkPolicyNodeStatus into a function: the creation of CNP NodeStatus objects was being performed in multiple places, and then sent to the K8s client in multiple places; factor this into a function. * add extensive comments which detail the meaning of various error cases: these cases are quite subtle. * update documentation of Error and OK in CiliumNetworkPolicyNodeStatus * always set Enforcing flag in CiliumNetworkPolicyNodeStatus: this means that the field will never be empty. --- Backporter's notes: Applied a partial revert of commit 8d15cc962c44 ("k8s: Use UpdateStatus for kubernetes server version >=1.11") to resolve backport conflict: diff --git a/daemon/k8s_watcher.go b/daemon/k8s_watcher.go index c8715f14287c..5583fb40f57a 100644 --- a/daemon/k8s_watcher.go +++ b/daemon/k8s_watcher.go @@ -1442,12 +1442,7 @@ func updateCNPNodeStatus(cnp *cilium_v2.CiliumNetworkPolicy, enforcing, ok bool, cnp.SetPolicyStatus(nodeName, cnpns) ns := k8sUtils.ExtractNamespace(&cnp.ObjectMeta) - switch { - case ciliumUpdateStatusVerConstr.Check(k8sServerVer): - _, err2 = ciliumNPClient.CiliumV2().CiliumNetworkPolicies(ns).UpdateStatus(cnp) - default: - _, err2 = ciliumNPClient.CiliumV2().CiliumNetworkPolicies(ns).Update(cnp) - } + _, err2 = ciliumNPClient.CiliumV2().CiliumNetworkPolicies(ns).Update(cnp) return err2 } Signed-off by: Ian Vernon <ian@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 03 August 2018, 20:00:02 UTC |
c5226b6 | Ian Vernon | 31 July 2018, 23:38:26 UTC | Prepare for release v1.1.2 Signed-off-by: Ian Vernon <ian@cilium.io> | 01 August 2018, 01:55:09 UTC |
239fb36 | André Martins | 27 July 2018, 18:32:39 UTC | kubernetes: set maxUnavailable to pods to 2 on upgrade [ upstream commit 6ac133c503223e0cd5186da07bf355530f3a5620 ] This will prevent Cilium from stopping all pods when doing an version upgrade. Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
02b0549 | André Martins | 27 July 2018, 15:43:56 UTC | daemon: always re-add CNP when receiving an update from Kubernetes [ upstream commit ca3b2c254d24b3c271697f26b519399c0f6ceb0f ] Fixes: 1fd4f57c1ab3 ("adding CRD cilium network policy policy status") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
23de365 | Maciej Kwiek | 27 July 2018, 00:41:52 UTC | Add label script docs to backporting process [ upstream commit 0b5f00a6e40e54fb4365040bcb92a05d48e8b3b4 ] Signed-off-by: Maciej Kwiek <maciej@covalent.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
48f6fed | Maciej Kwiek | 27 July 2018, 00:34:30 UTC | Add label script for backporting [ upstream commit 8ae80d14be1b166f122c4f960001794ba1919842 ] contrib/backporting/set-labels.py can be used to change backported PR label status accordingly. Signed-off-by: Maciej Kwiek <maciej@covalent.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
f5c9d2e | André Martins | 26 July 2018, 23:15:39 UTC | pkg/endpoint: annotate pod with numeric identity [ upstream commit a735c86d3dc6f352950f3ce254601d03654b9e3e ] As the pod annotation value is expected to be numeric, Cilium should always set that value with a numeric one instead of the string representation. Example of the expected output: $ kubectl get pods -n kube-system kube-dns-7dcc557ddd-vl9s2 -o yaml apiVersion: v1 kind: Pod metadata: annotations: cilium.io/identity: "129" scheduler.alpha.kubernetes.io/critical-pod: "" Fixes: e2d08b5ba510 ("endpoint: Use controller pattern to sync identity to k8s pod") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
6d3d96f | Maciej Kwiek | 27 July 2018, 19:54:25 UTC | Add client timeout for Cilium API [ upstream commit 66e36c4160e3671372de5fe79a8678a5d60b2f96 ] [ Backporter's notes: Imported 'apisocket' as 'api' ] Signed-off-by: Maciej Kwiek <maciej@covalent.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
5322e2e | Maciej Kwiek | 25 July 2018, 21:58:25 UTC | Increase timeout on endpoint generations [ upstream commit 50d7b947847aca94c24ff59a1f761384a1e3668b ] API server timeouts are also increased Signed-off-by: Maciej Kwiek <maciej@covalent.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
cda822b | Thomas Graf | 23 July 2018, 20:43:50 UTC | kvstore: Wait for kvstore watcher to exit [ upstream commit 534e30cb938b3f1a285ca6a367820403e73c8225 ] Also protect Stop() with a sync.Once to never close the channel twice. Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
5762e52 | Thomas Graf | 27 July 2018, 04:33:26 UTC | consul: Add timeout to List() in Watch() to detect watcher stop [ upstream commit 09a660939b1a70ec4594176c6e541d1acb3c974c ] Due to the default timeout value in the blocking List(), a Consul watcher was taking a long time to detect that the watcher must be stopped. Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
6e8d59a | Thomas Graf | 02 July 2018, 14:11:33 UTC | store: Make kvstore backend configurable [ upstream commit 131be74477bcfbf93f02b2dc1eb03804d82a1265 ] This is required for #4727 Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
35c3d3b | Thomas Graf | 05 July 2018, 21:40:57 UTC | ipcache: Allow providing kvstore client to watcher [ upstream commit f36767cd93f6a07f9177e3b1f16aef61c91e008b ] This is required for #4727 Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Joe Stringer <joe@wand.net.nz> | 30 July 2018, 15:25:21 UTC |
3fefea5 | André Martins | 26 July 2018, 10:35:20 UTC | docs: explicitly set kube-system namespace when applying new ConfigMap [ upstream commit a3686255addaa795edb3ed08bab31ca5eae76500 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Maciej Kwiek <maciej.iai@gmail.com> | 27 July 2018, 01:11:14 UTC |
7aec4c7 | Romain Lenglet | 25 July 2018, 05:13:11 UTC | doc: Disable unused Istio services in Istio GSG [ upstream commit 45129b7341dda99ce02df9cc85f0d0e85d780428 ] Signed-off-by: Romain Lenglet <romain@covalent.io> Signed-off-by: Maciej Kwiek <maciej.iai@gmail.com> | 27 July 2018, 01:11:14 UTC |
7b302be | Romain Lenglet | 25 July 2018, 05:12:38 UTC | doc: Support BSD sed in Istio GSG [ upstream commit 85885f930dae2d885e42182ff8fc2c25787ecae8 ] Fixes: https://github.com/cilium/cilium/issues/4564 Signed-off-by: Romain Lenglet <romain@covalent.io> Signed-off-by: Maciej Kwiek <maciej.iai@gmail.com> | 27 July 2018, 01:11:14 UTC |
4176f22 | Thomas Graf | 24 July 2018, 06:08:29 UTC | etcd: Fix and relax during recreate watcher loop [ upstream commit 734745ec7c801e54758ebbad61dc5f2d24dbef2c ] The revision to watch should not be incremented when Watch() returns an already closed channel. Also fix a cosmetic problem where lastRev in the for loop was shadowing the variable declared outside of the loop. We have observed occasions where etcd returns a closed channel on calling Watch(). The problem typically resolves itself quickly but we should sleep for a while to relax the CPU. Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Maciej Kwiek <maciej.iai@gmail.com> | 27 July 2018, 01:11:14 UTC |
49aef00 | André Martins | 23 July 2018, 19:48:38 UTC | pkg/endpoint: fix endpoint.logger race condition [ upstream commit b2967eb3b62b5d4aaa79ec023e71502db4380473 ] As getLogger specifies the endpoint.Mutex needs to be held, endpoint.getLogger() after a mutex.Lock() Fixes: 6a8b48951470 ("endpoint: Limit proxy completion timeout to proxy updates") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Maciej Kwiek <maciej.iai@gmail.com> | 27 July 2018, 01:11:14 UTC |
be3fb23 | Ian Vernon | 29 June 2018, 03:50:18 UTC | daemon: fix minimum number of work threads unit test [ upstream commit 3b33059187f7f89e2b3571d43cf24c38900536e0 ] The test failed with the following output when ran locally: ``` ---------------------------------------------------------------------- FAIL: <autogenerated>:1: DaemonConsulSuite.TestMinimumWorkerThreadsIsSet daemon_test.go:181: c.Assert(numWorkerThreads() >= 4, Equals, true) ... obtained bool = false ... expected bool = true ``` Fixes: 25f898609888 ("daemon: change minimal worker thread to 2") Signed-off-by: Ian Vernon <ian@cilium.io> Signed-off-by: Maciej Kwiek <maciej.iai@gmail.com> | 27 July 2018, 01:11:14 UTC |
9115d05 | Ray Bejjani | 23 July 2018, 21:03:44 UTC | codeowners: Remove CODEOWNERS from v1.1 | 23 July 2018, 21:14:52 UTC |
badb065 | Eloy Coto | 17 July 2018, 22:00:46 UTC | Test: K8s/Tunnels wait until all pods terminate [ upstream commit bfd17015b74f32c2bb2f769d75235bb2e97209ec ] Have seen in a PR that the pods are deleted on the `AfterEach` but never wait until it was terminated, the next test started installing the pods and it was still present. With this change test waits until all pods are being termintated correctly. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> | 21 July 2018, 14:53:18 UTC |
b7e4213 | Eloy Coto | 19 July 2018, 00:17:14 UTC | Test: Upgrade test wait until pods are terminated. [ upstream commit e76b84da91faf1bde23e4e9f7205416ea6fffab9 ] I saw in the build [0] that pods are not ready after the timeout, but the test itself didn't wait until cilium is uninstalled, so the system fails because no pods at all. With this change make sure that all terminated containers are deleted. [0] https://jenkins.cilium.io/job/Ginkgo-CI-Tests-Pipeline/3343/testReport/junit/k8s-1/7/K8sValidatedUpdates_Updating_Cilium_stable_to_master/ Signed-off-by: Eloy Coto <eloy.coto@gmail.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> | 21 July 2018, 14:53:18 UTC |
0aae09b | André Martins | 18 July 2018, 20:23:52 UTC | pkg/kvstore: fix high-cpu usage when Cilium loses Consul connectivity [ upstream commit a4f7f1e15ae5c2fe4564502cd4952aca2b907095 ] Fixes: 85469b099dac ("kvstore: New kvstore abstraction API") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> | 21 July 2018, 14:53:18 UTC |
6094010 | Ian Vernon | 18 July 2018, 17:57:16 UTC | Prepare for v1.1.1 release Signed-off-by: Ian Vernon <ian@cilium.io> | 18 July 2018, 20:53:32 UTC |
392980c | Ian Vernon | 13 July 2018, 21:54:32 UTC | pkg/policy/api: handle multiple CIDRs in CIDRSlice when adding reserved:world EndpointSelector [ upstream commit 5ce1514496fa95aa0431855f6900140b57ee8e7d ] If multiple CIDRs are provided in a CIDR rule, CIDRs corresponding to the world (0.0.0.0/0 and ::/0) are not correctly converted to the reserved:world EndpointSelector. The net effect of this is that policy does not allow traffic to the world when rules are provided that select multiple CIDRs, if any of the CIDRs within the CIDRSlice in the rule correspond to reserved:world. This commit fixes that bug, and adds additional unit tests. Signed-off-by: Ian Vernon <ian@cilium.io> | 18 July 2018, 00:38:59 UTC |
06de593 | André Martins | 13 July 2018, 12:46:54 UTC | pkg/endpoint: set state ready if endpoint labels are the same [ upstream commit 04c810122df1a53232799edb488de4de6b5dc29b ] Fixes: 7ccf87701fc ("kvstore: New kvstore abstraction API") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ian Vernon <ian@cilium.io> | 18 July 2018, 00:38:59 UTC |
a8f503d | Joe Stringer | 12 July 2018, 01:37:45 UTC | daemon: Mark all traffic from host with magic bits [ upstream commit 44dfd3e92dee8d642af6133260e3b20ec2da71f4 ] Originally we set this mark only for traffic destined to the cilium_host device, to ensure that any traffic directly reaching to a Cilium-managed IP could be classified as from the host. However, there's another case where a local process attempts to reach a service IP which is backed by a Cilium-managed pod. The service implementation is outside of Cilium's control, for example, handled by kube-proxy. We can tag even this traffic with a magic mark, then when the service implementation proxies it back into Cilium the BPF will see this mark and understand that the packet originated from the host. Fixes: #4715 Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Ian Vernon <ian@cilium.io> | 18 July 2018, 00:38:59 UTC |
d3b0a7f | André Martins | 11 July 2018, 08:30:09 UTC | pkg/workloads: check if Client() is nil to avoid nil pointer dereference [ upstream commit 27cda71dfc34aca0ad3898f18cf0d3d469d67619 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ian Vernon <ian@cilium.io> | 17 July 2018, 22:56:24 UTC |
85fad7f | Joe Stringer | 11 July 2018, 03:28:11 UTC | docs: Map stable RTD version to VERSION [ upstream commit 239cb9e7b8e2ec7abeed7e214a3cbd9ea0dfface ] When readthedocs requests to build the "stable" build, configure the links into GitHub to search for the release version specified in the root of the repository. This fixes the links for examples in the Cilium github repository for the stable version of the docs, such as those used in the kubernetes getting started guide. Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Ian Vernon <ian@cilium.io> | 17 July 2018, 22:56:24 UTC |
c7339ab | Romain Lenglet | 05 July 2018, 22:45:28 UTC | daemon: Add sidecar-istio-proxy-image flag [ upstream commit 204943ca621975eef3941d6750233a0ca31c4c40 ] Fixes: https://github.com/cilium/cilium/issues/4760 Signed-off-by: Romain Lenglet <romain@covalent.io> Signed-off-by: Ian Vernon <ian@cilium.io> | 17 July 2018, 22:56:24 UTC |
78d1cc7 | Romain Lenglet | 05 July 2018, 23:43:13 UTC | examples/kubernetes: Add sidecar-istio-proxy-image config map setting [ upstream commit bdb0af7f78da4f867f40f2c6249ef94d9b30d1d9 ] Signed-off-by: Romain Lenglet <romain@covalent.io> Signed-off-by: Ian Vernon <ian@cilium.io> | 17 July 2018, 22:56:24 UTC |
420568b | Ian Vernon | 16 July 2018, 22:54:54 UTC | Revert "Test: MicroscopeStart return callback if error." This reverts commit 7e0975c3051190eb5d21d10342182b5c382df991. Reverting this commit because there are multiple fixes needed (e.g., #4452) to ensure microscope is terminated properly in the CI. To avoid blocking backports further, reverting this commit is the simplest fix at this time. Signed-off-by: Ian Vernon <ian@cilium.io> | 17 July 2018, 20:31:28 UTC |
dc02761 | André Martins | 09 July 2018, 14:28:29 UTC | pkg/kvstore: set hard timeout for etcd lock path to 1 minute [ upstream commit c25a8493f8b3088443ea971747d2499bdee93d85 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
b2cc90d | Ian Vernon | 06 July 2018, 17:12:45 UTC | pkg/endpoint: use logStatusLocked in writeHeaderfile [ upstream commit ad989530eaa12be78b51e9c2afcbaeb584e5e00b ] writeHeaderfile is called with the endpoint Mutex is held. LogStatus tries to acquire the endpoint Mutex, and is called within writeHeaderfile. This is a deadlock scenario. Fix by calling logStatusLocked instead, which assumes the endpoint Mutex is held. Fixes: #4772 Signed-off-by: Ian Vernon <ian@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
73ab99b | Ian Vernon | 06 July 2018, 17:09:45 UTC | pkg/endpoint: lock endpoint Status indexMU in logStatusLocked [ upstream commit 548b68f9fefaf08fe77e6e6507ec7247d0732877 ] Some functions within pkg/endpoint called this function without the aforementioned mutex being locked, which should be done as we are updating the object which it protects. Move the locking logic into logStatusLocked, which is called when the endpoint Mutex is held. Signed-off by: Ian Vernon <ian@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
9bc5c8a | Thomas Graf | 06 July 2018, 16:22:02 UTC | bpf: Fix ipcache lookup for kernels with HAVE_LPM_MAP_TYPE [ upstream commit ce2278e7bf04819a5ce515452c5665dd3aeee137 ] Fix definitions of V4_CACHE_KEY_LEN and V6_CACHE_KEY_LEN to no longer account for IPCACHE_PREFIX_LEN() as ipcache_lookup4() and ipcache_lookup6() account for it themselves. Fixes: deb11d99016 ("bpf: Support LPM for ipcache on newer kernels") Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
18c815a | André Martins | 05 July 2018, 16:28:19 UTC | examples/kubernetes: fix default crio mounting path [ upstream commit 8937b90094b3c926ff514c93fddb05f92b4d8603 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
8db9c4b | Ian Vernon | 04 July 2018, 05:00:38 UTC | envoy: use local_resources parameter during bazel build [ upstream commit a2de55038c949c654a0a4b1a0724579217f25421 ] This sets the resources for memory, CPU, and I/O for the bazel build. This avoids errors like the following when building Envoy: ``` 23:27:39 virtualbox-iso: ERROR: /home/vagrant/.cache/bazel/_bazel_vagrant/502ef5068e38073dd9828a920a71f484/external/envoy/source/server/http/BUILD:11:1: C++ compilation of rule '@envoy//source/server/http:admin_lib' failed (Exit 4) 23:27:39 virtualbox-iso: gcc: internal compiler error: Killed (program cc1plus) 23:27:39 virtualbox-iso: Please submit a full bug report, 23:27:39 virtualbox-iso: with preprocessed source if appropriate. 23:27:39 virtualbox-iso: See <file:///usr/share/doc/gcc-7/README.Bugs> for instructions. 23:27:39 virtualbox-iso: Target //:envoy failed to build 23:27:39 virtualbox-iso: Use --verbose_failures to see the command lines of failed build steps. 23:27:39 virtualbox-iso: INFO: Elapsed time: 444.469s, Critical Path: 74.62s 23:27:39 virtualbox-iso: INFO: 1544 processes, local. 23:27:39 virtualbox-iso: FAILED: Build did NOT complete successfully 23:27:39 virtualbox-iso: FAILED: Build did NOT complete successfully 23:27:40 virtualbox-iso: make: *** [envoy-release] Error 1 23:27:40 virtualbox-iso: Makefile:68: recipe for target 'envoy-release' failed 23:27:41 ==> virtualbox-iso: Deregistering and deleting VM... 23:27:41 ==> virtualbox-iso: Deleting output directory... 23:27:41 Build 'virtualbox-iso' errored: Script exited with non-zero exit status: 2 ``` Signed-off by: Ian Vernon <ian@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
f4837b5 | André Martins | 04 July 2018, 19:33:44 UTC | pkg/endpoint: check endpoint's state before modifying identity labels [ upstream commit 9d7026b8c0fe97daca9c4412c5769e0226b87207 ] ModifyIdentityLabels() can potentially be invoked on an endpoint that is already disconnecting and the state transition can incorrectly revive it. Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
cee7d07 | Cynthia Thomas | 03 July 2018, 22:24:22 UTC | kops guide edits [ upstream commit 181a8143df5d63277fb8f17f654bb4c1a75ef198 ] Signed-off-by: Cynthia Thomas <cynthia@covalent.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
ea9ebe1 | Nirmoy Das | 03 July 2018, 09:50:29 UTC | cilium-docker: fix gatewayIPv4 assignment [ upstream commit 9a43b10c07ccfbb0e5c2784f1c7dc1d5d29eec10 ] Signed-off-by: Nirmoy Das <ndas@suse.de> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
75529dc | André Martins | 02 July 2018, 14:44:44 UTC | test: remove policy enforcement in k8s tests [ upstream commit 94557d4c8a69ae51e10830818f96bef26e8098ff ] As we are testing the policy enforcement in runtime tests there's no point on testing this test in kubernetes as it causes network disruption in the DNS pod. This network disruption might be causing test failures in the following tests. Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
60a7a5e | André Martins | 29 June 2018, 12:55:02 UTC | examples/kubernetes: add "system-node-critical" priorityClass [ upstream commit f385a2c37d0161e6a8d52fea8810a1b61d52483d ] More info: https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical-when-priorites-are-enabled Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
bba863f | Ian Vernon | 28 June 2018, 19:52:44 UTC | pkg/policy: take into account To / FromRequires when computing L4 policy [ upstream commit 123901fadb9ae0b93f6759bb294899350a599755 ] Previously, requirements (i.e., ToRequires and FromRequires) were not taken into account when computing L4Policy. The net effect of this was that traffic from more identities than should have been allowed, was allowed for L4-policy. To do so, augment the current L4 policy resolution framework to aggregate the endpoint selectors corresponding to all requirements which select the labels for which policy is being evaluated as Kubernetes MatchExpressions, and then for each rule, append these MatchExpressions to either FromEndpoints or ToEndpoints as the rule is being evaluated against the provided set of labels. Signed-off by: Ian Vernon <ian@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
fb1360e | Thomas Graf | 28 June 2018, 13:49:49 UTC | endpoint: Fix restored endpoints not showing up in ipcache [ upstream commit 048aecd0f7a609e8ea561b0f44f493d9ab5d7b53 ] Due to leaving the SetIdentity() functione early, the controller to sync the identity to the ipcache and to the k8s pod as annotation was never started until the identity has changed again. Fixes: 7448e41aa047 ("endpoint: sync endpoint IP-SecID map to kvstore") Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
b2e1d28 | André Martins | 28 June 2018, 12:29:15 UTC | pkg/k8s: stop logging conflicting errors as errors on update [ upstream commit 1c3072d9e1ae390c9aee1d721522a732e5377bde ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
f8ede31 | Eloy Coto | 05 July 2018, 14:44:03 UTC | TEST: Update kube-dns manifest for 1.11 and bigger versions. [ upstream commit ea2f1be5de378b42651ab6fc6c2a3ea0ddbb742a ] - Use coredns deployment file, with logs. - Use coredns/kubedns in different version on deployment - Move helper DNS deployment variable based on DNS engine Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
5ef22f0 | Eloy Coto | 03 July 2018, 12:58:07 UTC | Test: Update cilium stable image to v1.0.4 [ upstream commit 667304499ed46c7afc6c3e68a2fd77bcfaa91e45 ] Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
5dd0adf | Eloy Coto | 28 June 2018, 12:20:11 UTC | Test: Upgrade test, delete kube-dns pods before install. [ upstream commit e9c6dc4dfd93f462b1d41fabdc48086e5d1fdf86 ] Delete Kube-dns pods before cilium 1.0 is installed. This is because if not cilium 1.0 try to restore pods from 1.1 and maybe it fails. Related #4329 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
d739d5e | André Martins | 28 June 2018, 08:31:10 UTC | daemon: change minimal worker thread to 2 [ upstream commit 25f898609888dc1b0adf5b22e64a24f6f3f3b22d ] As all of your CI was running with 2 CPUs, it was creating some scalibility issues in cilium-agent while building the BPF programs. For this reason we should decrease the minimal worker threads to 2 so we can make sure Cilium won't take too much time to regenerate BPF programs in nodes that only have 2 CPUs. Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
06629aa | Ray Bejjani | 27 June 2018, 10:59:14 UTC | backport: Only check merged PRs [ upstream commit ff108fb09ac07eccffb31f73dc693856fde421a1 ] The script would surface closed PRs with the needs/backport label. Instead of cleaning those up, clean up the script. Signed-off-by: Ray Bejjani <ray@covalent.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
25a87d0 | Ray Bejjani | 27 June 2018, 11:15:43 UTC | backport: use the same url for all searches [ upstream commit 7dfffe42f51a0b5cfb8f2d2b085e7cc2da889f0d ] We had two, they were almost the same. Now we have one and no one will editg the incorrect one again. Signed-off-by: Ray Bejjani <ray@covalent.io> Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
7e0975c | Eloy Coto | 26 June 2018, 13:41:55 UTC | Test: MicroscopeStart return callback if error. [ upstream commit 548be0cf2755c65a42d33d0420f5e03f7430da53 ] If the Microscope pod is not ready in the given timeout, it returned `nil` callback that will fail when it is called on JustAfterEach, so no logs were gathered correctly. Related to #4644 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> | 11 July 2018, 17:18:05 UTC |
afa2457 | André Martins | 05 July 2018, 19:45:02 UTC | examples/kubernetes: fix k8s 1.12 cilium image tag Signed-off-by: André Martins <andre@cilium.io> | 10 July 2018, 09:21:57 UTC |
d74247a | André Martins | 28 May 2018, 14:06:11 UTC | examples/kubernetes: add k8s 1.12 deployment files [ upstream commit a93ee3d8fde7f67589615a4130477dbac4f478a2 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
d223dfc | André Martins | 28 May 2018, 11:52:53 UTC | test: add k8s 1.12 test framework [ upstream commit 878ad4d06426f3ec1294fea80fddd36d06b5e3c0 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
3b9797c | Jarno Rajahalme | 19 June 2018, 00:21:33 UTC | envoy: Rebase to to build backports The original commit is 6477c13882a6f36684a68fc4ef2af0861054a130 and it's commit mesages was: envoy: Rebase to get gRPC timeout support. Rebase to the upstream Envoy commit that adds support for 'max_grpc_timeout'. Pass the zero value for it, allowing infinite gRPC timeouts. The actual timeout is derived from the 'grpc-timeout' header, but if missing, it defaults to infinity. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
843800e | André Martins | 21 June 2018, 17:34:36 UTC | Dockerfile: update base build images to version 2018-06-21 [ upstream commit 43d19e330d22ff685bc6d616f49d196c51abbc8b ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
da3cb61 | André Martins | 21 June 2018, 17:28:29 UTC | Dockerfile: update go to 1.10.3 [ upstream commit b5728f1b91516c435eae1fcce617fd6b62fda019 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
a2c3d97 | André Martins | 25 June 2018, 16:23:00 UTC | pkg/endpoint: set policy revision if there is no datapath changes [ upstream commit 0e35b735c3c788dc47aa94b3e6e5dc49dfdbd25d ] As cilium calls regeneratePolicy inside regenerateBPF, it could end up setting up the policy revision before enforcing the changes in the datapath. This bug could be triggered by TriggerPolicyUpdates where the trace call could be the following: 1 - endpoint.TriggerPolicyUpdates 2 - endpoint.TriggerPolicyUpdatesLocked 3 - endpoint.regeneratePolicy returns (true, nil) returns (true, nil) 4 - endpoint.Regenerate 5 - endpoint.regeneratePolicy 6 - endpoint.setPolicyRevision(y) # -> WRONG! 7 - endpoint.regenerateBPF 8 - endpoint.setPolicyRevision(y) # -> 'y' was already wrongly set in step 6 Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
ed2a659 | Thomas Graf | 26 June 2018, 11:09:27 UTC | Doc: Fix service account policy example [ upstream commit 99e1158b827156a39cb8cb6721931b513394584c ] Fixes: 90e1d364dcd ("doc: Add documentation and example for service account matching") Reported-by: Cynthia Thomas <cynthia@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
9e590d4 | Thomas Graf | 26 June 2018, 13:09:05 UTC | kvstore: Fix unintentional info message [ upstream commit 5e36192012304c590b10961fef38db331224a8bd ] Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
b5bc936 | André Martins | 26 June 2018, 15:20:31 UTC | tests: Update cilium-builder in unit tests to 2018-06-21 [ upstream commit 04aa3a38f149055914c26dfb8592b4c46ee7cd29 ] Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
03a65f5 | Eloy Coto | 26 June 2018, 15:19:03 UTC | CI: Delete bugtool files correctly [ upstream commit c0935ef055ad1793467f601a00e4e40cd204197c ] On fail, the `kubectl.DumpCiliumCommandOutput` command creates some bugtool outputs and are saved on the test_result folder,but it was not deleted correctly from the pod, and it was in there if any other test fails it'll be in there and we dump old information. Signed-off-by: Eloy Coto <eloy.coto@gmail.com> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
d6aa1c2 | André Martins | 26 June 2018, 15:23:36 UTC | test: Use latest stable etcd and consul images [ upstream commit 678e983ddc07f05019e3b0b6b04146502444b383 ] Change the real etcd and consul docker image tags that are used in the unit tests run in the CI. Fixes: ab999f126278 ("test: Use latest stable etcd and consul images") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
d0ef14a | Maciej Kwiek | 25 June 2018, 14:25:48 UTC | Adjust installation from source guide [ upstream commit 8556f669da026d5cde57dc3806076892a33e7614 ] Signed-off-by: Maciej Kwiek <maciej@covalent.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
59bc60e | Maciej Kwiek | 25 June 2018, 14:25:17 UTC | Fix `go vet` issue [ upstream commit 463ef6860808a6731318af520840c2b1bab81bcd ] Signed-off-by: Maciej Kwiek <maciej@covalent.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
fe206ce | André Martins | 25 June 2018, 14:19:17 UTC | Revert "k8s: Updated LastUpdated after waiting for endpoint status" [ upstream commit aaa616bfb730968f8e7a26aeb5f0399098210044 ] This reverts commit 8f0383c5d893f81d011291406406de3024620eb0. Fixes: 8f0383c5d893 ("k8s: Updated LastUpdated after waiting for endpoint status") Signed-off-by: André Martins <andre@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 02 July 2018, 09:30:26 UTC |
d23c39f | Joe Stringer | 22 June 2018, 04:56:51 UTC | daemon: Refactor ipcache CIDR allocations to ipcache [ upstream commit 9a3037232fed19fc165985410e37fadf544c8586 ] Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 26 June 2018, 09:43:56 UTC |
d9a6af8 | Joe Stringer | 22 June 2018, 04:55:46 UTC | daemon: Release identities in failure condition [ upstream commit ba398fab0ce4f712a4b4dac79e71bc763f0e36a1 ] If some of the identities cannot be located in the kvstore, then none of the identities or ipcache entries would be deleted when removing a policy. Fix this up to instead attempt to locate as many of the entries as possible, then free as many as can be located. Fixes: 4692732 ("daemon: Allocate identities for CIDRs") Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 26 June 2018, 09:43:56 UTC |
2fbbdc8 | Joe Stringer | 22 June 2018, 04:52:10 UTC | daemon: Release ipcache entries on policy add failure [ upstream commit e62b3149072f1702372abcddaad07ed07df7a2ae ] If adding a policy failed, then we previously would release the identities that were allocated, but leave the ipcache mappings in the kvstore for those CIDR->ID pairs. Release the ipcache mappings as well. Fixes: 4692732 ("daemon: Allocate identities for CIDRs") Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 26 June 2018, 09:43:56 UTC |
b945508 | Thomas Graf | 25 June 2018, 07:38:24 UTC | Documentation: Re-work the contributor guide [ upstream commit 85a714521f0ed78ba96f02390bd47d9b44270f04 ] This is a heavy restructing and rework of the contributor guide: * Better high level structure * Updated release cadence and LTS explanation * Release process documentation * PR review process documentation * Merging of CONTRIBUTING.md into the contributor guide * CI failure triage process Signed-off-by: Thomas Graf <thomas@cilium.io> Signed-off-by: Ray Bejjani <ray@covalent.io> | 26 June 2018, 09:43:56 UTC |
56cb7ee | Shantanu Deshpande | 25 June 2018, 07:08:39 UTC | Fix nesting for Upgrade notes for 1.1 [ upstream commit 70b019f0ac72ca329256f7a84c395db7a51d110a ] Signed-off-by: Shantanu Deshpande <shantanud106@gmail.com> Signed-off-by: Ray Bejjani <ray@covalent.io> | 26 June 2018, 09:43:56 UTC |
8af7446 | Joe Stringer | 23 June 2018, 22:00:50 UTC | metricsmap: Fix index out of range error [ upstream commit 63f3676dfbce11a4d80d209246c0dcfe30906ad7 ] This function was declaring an array of length `possibleCPUsFileLength` then reading indexes of up to `possibleCpus` out of the array. When the number of possible CPUs is large, this would cause the following error: panic: runtime error: index out of range goroutine 236 [running]: github.com/cilium/cilium/pkg/maps/metricsmap.SyncMetricsMap(0x0, 0x0) /go/src/github.com/cilium/cilium/pkg/maps/metricsmap/metricsmap.go:194 +0x33b created by github.com/cilium/cilium/pkg/controller.(*Manager).UpdateController /go/src/github.com/cilium/cilium/pkg/controller/manager.go:82 +0x30c To fix this, declare a slice and use the pointer to the first element to pass to the kernel. This should point to a contiguous memory location of the appropriate length for the kernel to write the results into, according to the following documentation: https://blog.golang.org/go-slices-usage-and-internals Fixes: #4622 Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 24 June 2018, 15:20:15 UTC |
7d0c247 | Thomas Graf | 23 June 2018, 08:48:14 UTC | NEWS: Update after latest backports Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
3567943 | Joe Stringer | 22 June 2018, 18:09:27 UTC | treewide: Avoid go build `-i` [ upstream commit e542412662b85a1b32bb80043d115e03c9b3b83f ] Using `-i` in the "go build" arguments with Golang 1.10 on Ubuntu using a snap package results in this error: $ make -C daemon CHECK contrib/scripts/bindata.sh GO daemon/cilium-agent go build runtime/cgo: open /snap/go/2130/pkg/linux_amd64/runtime/cgo.a: read-only file system According to the upstream issue, this is because it's attempting to rebuild the core Golang packages on the system, and snap is preventing this via a read-only file system to ensure consistency for the base Golang version. The workaround suggested in the following issue is to remove `-i`. https://github.com/golang/go/issues/24674 Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
cfd88fb | Joe Stringer | 22 June 2018, 17:39:11 UTC | ipcache: Improve comments for reference counter [ upstream commit f91762fc65150aba8a942066515fdd4b209a2775 ] Clean up some minor typos in the comments. Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
6a9c213 | Joe Stringer | 20 June 2018, 18:30:46 UTC | k8s: Allocate ipcache mappings for service backends [ upstream commit 03a3fd791d8eb9ae884742f248939a412822bf1e ] When generating CIDR rules in k8s translation, allocate identities for the new CIDRs (for service backends) and create CIDR->Identity mappings in the IPCache. Fixes: #4570 Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
5b6cc42 | Thomas Graf | 22 June 2018, 22:21:24 UTC | k8s: Simplify EndpointSelector creation in tests [ upstream commit 90d125a4200563948f5edbd60a34c863d8c961b4 ] [ NOTE: partial backport of only NewESFromMatchRequirements] Previously, these tests declared EndpointSelectors directly, assuming that they have indepth knowledge of the internal structure of the EndpointSelector. However, future changes may modify the internals of EndpointSelector. To simplify these future changes and reduce the tight coupling of these two packages, make use of constructors to create the endpoint selectors. Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
69079ab | Joe Stringer | 21 June 2018, 01:33:13 UTC | policy: Refactor getting CIDR prefixes from CIDR strings [ upstream commit 5e712a312c8b3f6715b769fbe8e38d738e545741 ] Put this code into the ip package so that an upcoming commit can reuse from common/. Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
0ac2142 | Joe Stringer | 22 June 2018, 04:56:51 UTC | daemon: Refactor ipcache CIDR allocations to ipcache [ upstream commit 9a3037232fed19fc165985410e37fadf544c8586 ] Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
cda88b8 | Joe Stringer | 22 June 2018, 04:55:46 UTC | daemon: Release identities in failure condition [ upstream commit ba398fab0ce4f712a4b4dac79e71bc763f0e36a1 ] If some of the identities cannot be located in the kvstore, then none of the identities or ipcache entries would be deleted when removing a policy. Fix this up to instead attempt to locate as many of the entries as possible, then free as many as can be located. Fixes: 4692732 ("daemon: Allocate identities for CIDRs") Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
ec51b68 | Joe Stringer | 22 June 2018, 04:52:10 UTC | daemon: Release ipcache entries on policy add failure [ upstream commit e62b3149072f1702372abcddaad07ed07df7a2ae ] If adding a policy failed, then we previously would release the identities that were allocated, but leave the ipcache mappings in the kvstore for those CIDR->ID pairs. Release the ipcache mappings as well. Fixes: 4692732 ("daemon: Allocate identities for CIDRs") Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
d2d9081 | Thomas Graf | 21 June 2018, 14:24:49 UTC | identity: Move CIDR identity code into pkg/identity/cidr [ upstream commit bdd61af2287373ff9d86e2fd9ff00a4c29b8a897 ] This removes the following dependency tree from pkg/identity: ``` - ├ github.com/cilium/cilium/pkg/labels/cidr - ├ fmt - ├ net - ├ github.com/cilium/cilium/pkg/labels - └ github.com/cilium/cilium/pkg/node - ├ bufio - ├ bytes - ├ fmt - ├ net - ├ os - ├ os/exec - ├ strconv - ├ strings - ├ github.com/cilium/cilium/api/v1/models - ├ github.com/cilium/cilium/common - ├ github.com/cilium/cilium/pkg/byteorder - ├ encoding/binary - ├ fmt - ├ reflect - └ unsafe - ├ github.com/cilium/cilium/pkg/lock - ├ github.com/cilium/cilium/pkg/logging - ├ github.com/cilium/cilium/pkg/logging/logfields - ├ github.com/cilium/cilium/pkg/maps/tunnel - ├ net - ├ os - ├ path/filepath - ├ unsafe - ├ github.com/cilium/cilium/pkg/bpf - ├ bufio - ├ bytes - ├ encoding/binary - ├ fmt - ├ math - ├ net - ├ os - ├ path - ├ path/filepath - ├ runtime - ├ sync - ├ syscall - ├ unsafe - ├ C - ├ github.com/cilium/cilium/common/types - ├ github.com/cilium/cilium/pkg/byteorder - ├ github.com/cilium/cilium/pkg/comparator - ├ reflect - ├ github.com/cilium/cilium/vendor/github.com/kr/pretty - ├ fmt - ├ io - ├ log - ├ reflect - ├ strconv - ├ text/tabwriter - └ github.com/cilium/cilium/vendor/github.com/kr/text - ├ bytes - ├ io - └ math - ├ github.com/cilium/cilium/vendor/github.com/pmezard/go-difflib/difflib - ├ bufio - ├ bytes - ├ fmt - ├ io - └ strings - └ github.com/cilium/cilium/vendor/gopkg.in/check.v1 - ├ bufio - ├ bytes - ├ errors - ├ flag - ├ fmt - ├ go/ast - ├ go/parser - ├ go/printer - ├ go/token - ├ io - ├ math/rand - ├ os - ├ path - ├ path/filepath - ├ reflect - ├ regexp - ├ runtime - ├ strconv - ├ strings - ├ sync - ├ sync/atomic - ├ testing - └ time - ├ github.com/cilium/cilium/pkg/components - ├ os - └ strings - ├ github.com/cilium/cilium/pkg/defaults - ├ github.com/cilium/cilium/pkg/lock - ├ github.com/cilium/cilium/pkg/logging - ├ github.com/cilium/cilium/pkg/logging/logfields - ├ github.com/cilium/cilium/pkg/mountinfo - ├ bufio - ├ fmt - ├ os - ├ strconv - └ strings - ├ github.com/cilium/cilium/vendor/github.com/sirupsen/logrus - └ github.com/cilium/cilium/vendor/golang.org/x/sys/unix - ├ github.com/cilium/cilium/pkg/defaults - ├ github.com/cilium/cilium/pkg/logging - ├ github.com/cilium/cilium/pkg/logging/logfields - └ github.com/cilium/cilium/vendor/github.com/sirupsen/logrus - ├ github.com/cilium/cilium/pkg/mtu - ├ github.com/cilium/cilium/pkg/option - ├ github.com/cilium/cilium/vendor/github.com/sirupsen/logrus - ├ github.com/cilium/cilium/vendor/github.com/vishvananda/netlink - ├ encoding/binary - ├ errors - ├ fmt - ├ math - ├ net - ├ strings - ├ time - ├ github.com/cilium/cilium/vendor/github.com/vishvananda/netlink/nl - └ encoding/binary - ├ github.com/cilium/cilium/vendor/github.com/vishvananda/netns - ├ errors - ├ fmt - └ syscall - └ github.com/cilium/cilium/vendor/golang.org/x/sys/unix - ├ github.com/cilium/cilium/vendor/golang.org/x/sys/unix - └ github.com/cilium/cilium/vendor/k8s.io/api/core/v1 ``` Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
75f116a | Joe Stringer | 21 June 2018, 23:25:33 UTC | ipcache: Count references to ipcache mappings [ upstream commit 6f9ab9a9808ad6661db997c88cd86d89a3443da7 ] Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
6875601 | Joe Stringer | 21 June 2018, 21:39:12 UTC | ipcache: Set logging subsys to 'ipcache' [ upstream commit 74f08cda698e264675dc5db843087c1d40303d53 ] This should help in identifying or filtering log messages relevant to this subsystem. Related: #4607 Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
cc65fd7 | Joe Stringer | 21 June 2018, 21:31:08 UTC | ipcache: Split into multiple files [ upstream commit 1afe998b1657d7afe275739e5d5ab9d7390833ee ] Signed-off-by: Joe Stringer <joe@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
f057e38 | Arvind Soni | 21 June 2018, 20:38:13 UTC | Fixed a reference that was to localhost Changed the clustername to include a username to avoid stepping on multiple clusters [ upstream commit 012378bf7f3e444744086711be398baa9f517028 ] Signed-off-by: Arvind Soni <arvindsoni@gmail.com> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
601aefc | Arvind Soni | 08 June 2018, 20:04:00 UTC | expanded install guide for kops with complete steps from scratch [ upstream commit baabea2db6fb354202f30630a99501cb54bb8616 ] also fixed a typo labelled --> labeled in metrics.rst Signed-off-by: Arvind Soni <arvindsoni@gmail.com> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
cc22c76 | Eloy Coto | 22 June 2018, 08:41:36 UTC | Test: Wait until all pods are ready [ upstream commit 7e1130407de36e0467d7bb43ca616d0aebce6f0d ] Fix #4612 Signed-off-by: Eloy Coto <eloy.coto@gmail.com> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
67947c5 | Romain Lenglet | 21 June 2018, 17:04:51 UTC | docs: Remove sidecar-http-proxy config from upgrade instructions [ upstream commit 8023f74b76d2339af3b5eace448616a01b73d246 ] Fixes: https://github.com/cilium/cilium/commit/4ccf124629942f7ab1c461485fe7b8f3ed3caf94 Fixes: https://github.com/cilium/cilium/pull/4531 Signed-off-by: Romain Lenglet <romain@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
6464509 | Thomas Graf | 21 June 2018, 15:31:28 UTC | agent: Require go 1.10 for safe namespace operations [ upstream commit 4390a693c3a2e98f3e79bac1096706aaa5733064 ] Ensure that we build Cilium container images with Go 1.10 to ensure safe namespace interactions. Document this properly as a requirement in the vagrant box and remove the FIXME in the CNI plugin which is no longer an issue. Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
f55d1e6 | Mark deVilliers | 20 June 2018, 20:17:02 UTC | Check for nil before accessing Status [ upstream commit 85dc7669c2c13bd23de400ec3fd74834624bc397 ] Fixes: #4256 Signed-off-by: Mark deVilliers <markdevilliers@gmail.com> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
5ad84eb | Thomas Graf | 20 June 2018, 10:29:55 UTC | cni: Change default configuration filename to 00-cilium.conf [ upstream commit 2727a6124fdef1f272c25bb54ae22e0f2f5483e5 ] Various other plugins do not remove the configuration upon uninstallation which then causes conflicts as kubelet picks the first CNI based on alphabetical order. Change the default configuration filename to a prefix that should come first. This is safe as Cilium properly removes the configure when the pod exits. Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
918e4b3 | Thomas Graf | 20 June 2018, 23:46:10 UTC | allocator: Re-use randomly generated ID sequence between allocations [ upstream commit 2f5a8ed2c70b016ea9e1a50fb439190ef0ef3a57 ] While benchmarking the remaining cost of allocations, math/rand usage is the clear bottleneck: 1560ms 12.80% 25.92% 4830ms 39.62% math/rand.(*Rand).Perm /usr/local/go/src/math/rand/rand.go 1440ms 11.81% 37.74% 2510ms 20.59% math/rand.(*Rand).Int31n /usr/local/go/src/math/rand/rand.go 1140ms 9.35% 47.09% 1590ms 13.04% runtime.scanobject /usr/local/go/src/runtime/mgcmark.go 540ms 4.43% 51.52% 540ms 4.43% math/rand.(*rngSource).Int63 /usr/local/go/src/math/rand/rng.go 510ms 4.18% 55.70% 510ms 4.18% runtime.futex /usr/local/go/src/runtime/sys_linux_amd64.s 460ms 3.77% 59.47% 2970ms 24.36% math/rand.(*Rand).Intn /usr/local/go/src/math/rand/rand.go 280ms 2.30% 61.77% 1070ms 8.78% math/rand.(*Rand).Int31 /usr/local/go/src/math/rand/rand.go Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |
6cd1371 | Jarno Rajahalme | 21 June 2018, 18:29:59 UTC | Docs: Remove CoreOS Installation Guide [ upstream commit a21f0f5c484509de75db69203528aceba5f99f2a ] CoreOS links we use are now redirected to Tectonic installation guides. As such this document would require extensive revision and validation work. This has been broken for a while now and there has been no apparent interest in this guide, so better remove it. Besides, users can use Kops instead, as it also installs CoreOS images. Signed-off-by: Jarno Rajahalme <jarno@covalent.io> Signed-off-by: Thomas Graf <thomas@cilium.io> | 23 June 2018, 09:00:28 UTC |