Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[1.14] bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes #28123

Merged
merged 1 commit into from Sep 13, 2023
Merged

[1.14] bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes #28123

merged 1 commit into from Sep 13, 2023

Conversation

qmonnet
Copy link
Member

@qmonnet qmonnet commented Sep 12, 2023

Once this PR is merged, you can update the PR labels via:

for pr in 27798; do contrib/backporting/set-labels.py $pr done 1.14; done

or with

make add-labels BRANCH=v1.14 ISSUES=27798

@ti-mo @qmonnet
bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes
4a555c2 
[ upstream commit e2829a0 ]

This patch adds a check to determine whether a Pod is sending traffic to
itself through a Service. With endpoint routes enabled, this traffic is
subject to policy, and we want to avoid the user to have to explicitly
allow traffic to+from itself.

Signed-off-by: Timo Beckers <timo@isovalent.com>
Co-authored-by: Quentin Monnet <quentin@isovalent.com>
Signed-off-by: Quentin Monnet <quentin@isovalent.com>
@qmonnet qmonnet added kind/backports This PR provides functionality previously merged into master. backport/1.14 This PR represents a backport for Cilium 1.14.x of a PR that was merged to main. labels Sep 12, 2023
@qmonnet qmonnet requested a review from a team as a code owner September 12, 2023 15:55
@qmonnet
Copy link
Member Author

qmonnet commented Sep 12, 2023

/test-backport-1.14

julianwiedmann
julianwiedmann approved these changes Sep 13, 2023
View reviewed changes
Copy link
Member

@julianwiedmann julianwiedmann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks!

@julianwiedmann julianwiedmann merged commit 9ab7148 into v1.14 Sep 13, 2023
196 checks passed
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Sep 13, 2023
@julianwiedmann julianwiedmann deleted the pr/qmonnet/svc-hairpinning-1.14 branch September 13, 2023 05:45
@jrajahalme jrajahalme mentioned this pull request Oct 18, 2023
Merged
@lucasfcnunes lucasfcnunes mentioned this pull request Oct 19, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@julianwiedmann julianwiedmann julianwiedmann approved these changes

Assignees
No one assigned
Labels
backport/1.14 This PR represents a backport for Cilium 1.14.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. ready-to-merge This PR has passed all tests and received consensus from code owners to merge.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@qmonnet @julianwiedmann @ti-mo