Revision 97b43b1b568b49594e693e66d25f5be6971bdb1d authored by John Fastabend on 11 July 2019, 23:17:42 UTC, committed by John Fastabend on 10 August 2019, 21:28:13 UTC
This adds a configuration test for encryption using the encrypt-node helm option. The datapath is slightly different in this mode depending on kernel versions. In kernels with fib_lookup support we use that if fib lookup is not supported we send it out the encrypt-interface specified on the CLI. This works in some environments, such as GKE, but will break in others (ENI with subnets?). Signed-off-by: John Fastabend <john.fastabend@gmail.com>
1 parent 5a4d0dc
| File | Mode | Size |
|---|---|---|
| ansible | ||
| backporting | ||
| coccinelle | ||
| codegen | ||
| flannel | ||
| gofat | ||
| k8s | ||
| packaging | ||
| policy-watcher | ||
| release | ||
| scripts | ||
| shell | ||
| systemd | ||
| vagrant |
Computing file changes ...
