Skip to main content

Browse the archive

https://github.com/cilium/cilium
09 April 2024, 21:14:05 UTC
Revision 692f39539937f4f167e2714eb62731d7ac9b5d04 authored by Paul Chaignon on 19 May 2023, 19:38:45 UTC, committed by Sebastian Wicki on 13 June 2023, 19:22:04 UTC 
loader: Allow reinitializeIPSec to run multiple times
 
[ upstream commit e880002be665e96473daced96f809b3b04f81e27 ]

reinitializeIPSec only runs the interface detection if EncryptInterface
is empty. Since it sets it after detecting interfaces, it will only run
the detection once.

Let's change that to run the detection even if the EncryptInterface list
isn't empty. That will allow us to rerun the detection when new ENI
devices are added on EKS.

One consequence of this change is that we will now attach to all
interfaces even if the user configured --encrypt-interface. That is fine
because --encrypt-interface shouldn't actually be used in ENI mode. In
ENI mode, we want to attach to all interfaces as we don't have a
guarantee on which interface the IPsec traffic will come in.

Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
Signed-off-by: Jussi Maki <jussi@isovalent.com>
Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
1 parent f1a44e9
History
Tip revision: 692f39539937f4f167e2714eb62731d7ac9b5d04 authored by Paul Chaignon on 19 May 2023, 19:38:45 UTC
loader: Allow reinitializeIPSec to run multiple times
Tip revision: 692f395
File Mode Size
.github
.travis
Documentation
api
bpf
bugtool
cilium
cilium-health
clustermesh-apiserver
contrib
daemon
envoy
examples
hack
hubble-relay
images
install
jenkinsfiles
operator
pkg
plugins
proxylib
test
tools
vendor
.authors.aux -rw-r--r-- 416 bytes
.gitattributes -rw-r--r-- 301 bytes
.gitignore -rw-r--r-- 1.5 KB
.gitmodules -rw-r--r-- 0 bytes
.golangci.yaml -rw-r--r-- 3.3 KB
.mailmap -rw-r--r-- 5.0 KB
.travis.yml -rw-r--r-- 1.2 KB
AUTHORS -rw-r--r-- 26.3 KB
CHANGELOG.md -rw-r--r-- 151.8 KB
CODEOWNERS -rw-r--r-- 1.2 KB
CODE_OF_CONDUCT.md -rw-r--r-- 2.2 KB
CONTRIBUTING.md -rw-r--r-- 227 bytes
FURTHER_READINGS.rst -rw-r--r-- 4.9 KB
GO_VERSION -rw-r--r-- 8 bytes
LICENSE -rw-r--r-- 11.1 KB
MAINTAINERS.md -rw-r--r-- 3.8 KB
Makefile -rw-r--r-- 29.1 KB
Makefile.defs -rw-r--r-- 6.0 KB
Makefile.docker -rw-r--r-- 6.3 KB
Makefile.quiet -rw-r--r-- 788 bytes
README.rst -rw-r--r-- 15.0 KB
SECURITY.md -rw-r--r-- 615 bytes
USERS.md -rw-r--r-- 8.1 KB
VERSION -rw-r--r-- 8 bytes
Vagrantfile -rw-r--r-- 12.9 KB
go.mod -rw-r--r-- 10.9 KB
go.sum -rw-r--r-- 206.7 KB
netlify.toml -rw-r--r-- 92 bytes
stable.txt -rw-r--r-- 8 bytes
vagrant_box_defaults.rb -rw-r--r-- 394 bytes

README.rst

back to top