Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.13 Backports 2023-08-28 #27741

Merged
merged 4 commits into from Sep 1, 2023
Merged

v1.13 Backports 2023-08-28 #27741

merged 4 commits into from Sep 1, 2023

Conversation

pippolo84
Copy link
Member

@pippolo84 pippolo84 commented Aug 28, 2023

  • proxy: Ignore visibility annotation if proxy is disabled #27597 (@sayboras)
    • ⚠️ merge conflicts due to different signature for function policy.NewPolicyRepository in v1.13
  • ci-ipsec-upgrade: Skip upon test/Documentation changes #27644 (@brb)
  • CI: Rename workflow names #27391 (@brlbil)
    • ⚠️ merge conflicts due to missing workflow files in v1.13 branch:
      • .github/workflows/build-images-docs-builder.yaml
      • .github/workflows/ci-images-cache-cleaner.yaml
      • .github/workflows/ci-images-garbage-collect.yaml
      • .github/workflows/close-stale-issues.yaml
      • .github/workflows/conformance-ginkgo.yaml
      • .github/workflows/conformance-ipsec-e2e.yaml
      • .github/workflows/conformance-k8s-kind-network-policies.yaml
      • .github/workflows/conformance-k8s-kind.yaml
      • .github/workflows/conformance-k8s-network-policies.yaml
      • .github/workflows/conformance-kind-proxy-daemonset.yaml
      • .github/workflows/conformance-multi-pool.yaml
      • .github/workflows/conformance-runtime.yaml
      • .github/workflows/container-scan.yaml
      • .github/workflows/integration-test.yaml
      • .github/workflows/lint-codeowners.yaml
      • .github/workflows/lint-workflows.yaml
      • .github/workflows/push-chart-ci.yaml
      • .github/workflows/tests-datapath-verifier.yaml

PRs skipped due to conflicts:

Once this PR is merged, you can update the PR labels via:

for pr in 27597 27644 27391; do contrib/backporting/set-labels.py $pr done 1.13; done

or with

make add-labels BRANCH=v1.13 ISSUES=27597,27644,27391

@pippolo84 pippolo84 added kind/backports This PR provides functionality previously merged into master. backport/1.13 This PR represents a backport for Cilium 1.13.x of a PR that was merged to main. labels Aug 28, 2023
@pippolo84 pippolo84 marked this pull request as ready for review August 28, 2023 13:34
@pippolo84 pippolo84 requested review from a team as code owners August 28, 2023 13:34
@giorio94
Copy link
Member

PRs skipped due to conflicts:

#27646 (@giorio94)

I mistakenly assumed that the Chart CI Push existed in v1.13, but it appears to not be present. I've dropped the associated needs-backport label from #27646. Sorry for the noise.

@pippolo84
Copy link
Member Author

PRs skipped due to conflicts:
#27646 (@giorio94)

I mistakenly assumed that the Chart CI Push existed in v1.13, but it appears to not be present. I've dropped the associated needs-backport label from #27646. Sorry for the noise.

No problem at all, thanks!

@brlbil brlbil force-pushed the pr/v1.13-backport-2023-08-28 branch 2 times, most recently from 3c54df1 to 2591489 Compare August 29, 2023 12:08
Copy link
Contributor

@brlbil brlbil left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have made small changes to my commit.

Since some of the workflow names changed, Required Workflows need to be adjusted after this is merged.

The list of changes is below.

-name: ConformanceAKS (ci-aks)
+name: Conformance AKS (ci-aks)
--
-name: ClusterMesh (ci-multicluster)
+name: Conformance Cluster Mesh (ci-clustermesh)
--
-name: Cilium Conformance E2E (ci-e2e)
+name: Conformance E2E (ci-e2e)
--
-name: ConformanceEKS (ci-eks)
+name: Conformance EKS (ci-eks)
--
-name: External workloads (ci-external-workloads)
+name: Conformance External Workloads (ci-external-workloads)
--
-name: ConformanceGatewayAPI
+name: Conformance Gateway API
--
-name: ConformanceGKE (ci-gke)
+name: Conformance GKE (ci-gke)
--
-name: ConformanceIngress
+name: Conformance Ingress
--
-name: ConformanceKind
+name: Conformance Kind
--
-name: BPF checks
+name: BPF Checks
--
-name: build-commits
+name: Build Commits
--
-name: codeql
+name: CodeQL
--
-name: Go-related checks
+name: Go Related Checks
--
-name: Smoke test
+name: Smoke Test

Also, Branch protection rules need to be adjusted.
To Remove

build datapath
coccicheck
conformance-test
conformance-test-ipv6
generate-api
generate-k8s-api
go-mod
helm-charts
installation-and-connectivity

To Add

BPF Checks / Build Datapath
BPF Checks / Run coccicheck
Smoke Test / Installation and Conformance Test
Smoke Test with IPv6 / Installation and Conformance Test
Go Related Checks / Generate API
Go Related Checks / Generate k8s API
Go Related Checks / Check Go Modules
Smoke Test / Helm Charts Check
Conformance Kind / Installation and Connectivity Test

sayboras and others added 4 commits August 31, 2023 10:05
[ upstream commit fe37586 ]

This is to avoid the below error if proxy is disabled as part of
installation, but the visibility annotation is added to pods later.

```
2023-08-11T12:42:41.390575371Z goroutine 1522 [running]:
2023-08-11T12:42:41.390581994Z github.com/cilium/cilium/pkg/proxy.(*Proxy).CreateOrUpdateRedirect(0x0, {0x3ae74b8, 0xc000650280}, {0x3aeb440?, 0xc0016e4560?}, {0xc0010ba1b0, 0x12}, {0x3afd260, 0xc000982000}, 0xc001c9c980)
2023-08-11T12:42:41.390589198Z  github.com/cilium/cilium/pkg/proxy/proxy.go:459 +0xb7
2023-08-11T12:42:41.390596081Z github.com/cilium/cilium/pkg/endpoint.(*Endpoint).addVisibilityRedirects(0xc000982000, 0x1, 0xc001874ba0?, 0xc001c9c980?)
2023-08-11T12:42:41.390602613Z  github.com/cilium/cilium/pkg/endpoint/bpf.go:343 +0x443
2023-08-11T12:42:41.390614345Z github.com/cilium/cilium/pkg/endpoint.(*Endpoint).addNewRedirects(0xc000982000, 0xc001874870?)
2023-08-11T12:42:41.390651325Z  github.com/cilium/cilium/pkg/endpoint/bpf.go:424 +0x3c5
2023-08-11T12:42:41.390658068Z github.com/cilium/cilium/pkg/endpoint.(*Endpoint).runPreCompilationSteps(0xc000982000, 0xc000e31800, 0x0)
2023-08-11T12:42:41.390663999Z  github.com/cilium/cilium/pkg/endpoint/bpf.go:802 +0x4fe
2023-08-11T12:42:41.390669690Z github.com/cilium/cilium/pkg/endpoint.(*Endpoint).regenerateBPF(0xc000982000, 0xc000e31800)
2023-08-11T12:42:41.390675451Z  github.com/cilium/cilium/pkg/endpoint/bpf.go:542 +0x1a5
2023-08-11T12:42:41.390681112Z github.com/cilium/cilium/pkg/endpoint.(*Endpoint).regenerate(0xc000982000, 0xc000e31800)
2023-08-11T12:42:41.390686893Z  github.com/cilium/cilium/pkg/endpoint/policy.go:467 +0x9c6
2023-08-11T12:42:41.390692564Z github.com/cilium/cilium/pkg/endpoint.(*EndpointRegenerationEvent).Handle(0xc000131b50, 0x0?)
2023-08-11T12:42:41.390698385Z  github.com/cilium/cilium/pkg/endpoint/events.go:53 +0x325
2023-08-11T12:42:41.390704045Z github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run.func1()
2023-08-11T12:42:41.390709716Z  github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:245 +0x142
```

Fixes: #27594

Signed-off-by: Tam Mach <tam.mach@cilium.io>
Signed-off-by: Fabio Falzoi <fabio.falzoi@isovalent.com>
[ upstream commit 3f23ba7 ]

This is to ensure that proxy must be enabled if Envoy L7 Load balancer
feature is enabled.

Signed-off-by: Tam Mach <tam.mach@cilium.io>
Signed-off-by: Fabio Falzoi <fabio.falzoi@isovalent.com>
[ upstream commit 9389b2c ]

Reported-by: Joe Stringer <joe@cilium.io>
Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Fabio Falzoi <fabio.falzoi@isovalent.com>
[ upstream commit e9e43fe ]

This commit changes workflow's name fields to
make them more human readable by adding spaces.
Also some of the names was changed to be more consistent with each other

Signed-off-by: Birol Bilgin <birol@cilium.io>
Signed-off-by: Fabio Falzoi <fabio.falzoi@isovalent.com>
@pippolo84
Copy link
Member Author

Rebased to fix conflicts with target branch.

@pippolo84
Copy link
Member Author

/test-backport-1.13

@pippolo84
Copy link
Member Author

Pinging @brb and @sayboras for the missing reviews 🙏

Copy link
Member

@brb brb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks.

@aditighag aditighag merged commit f6932ee into v1.13 Sep 1, 2023
116 of 120 checks passed
@aditighag aditighag deleted the pr/v1.13-backport-2023-08-28 branch September 1, 2023 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/1.13 This PR represents a backport for Cilium 1.13.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants