Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.7 backport for #11333 #11414

Merged
merged 5 commits into from
May 14, 2020
Merged

v1.7 backport for #11333 #11414

merged 5 commits into from
May 14, 2020

Conversation

joestringer
Copy link
Member

@joestringer joestringer commented May 7, 2020

Once this PR is merged, you can update the PR labels via:

$ for pr in 11333; do contrib/backporting/set-labels.py $pr done 1.7; done

Currently I backported this including all test changes, but if we hit issues because the required test code is not available I'll just drop them and rework this to only include the functional fix.

@joestringer joestringer requested a review from a team as a code owner May 7, 2020 22:27
@joestringer joestringer added backport/1.7 kind/backports This PR provides functionality previously merged into master. labels May 7, 2020
@joestringer
Copy link
Member Author

never-tell-me-the-odds

@joestringer
Copy link
Member Author

Hit known flake #10442.

@joestringer joestringer added the dont-merge/blocked Another PR must be merged before this one. label May 8, 2020
@joestringer joestringer marked this pull request as draft May 8, 2020 18:12
@joestringer
Copy link
Member Author

I'll hold off on rebasing this until #11233 goes in to minimize the conflicts there.

@joestringer joestringer force-pushed the pr/v1.7-backport-2020-05-07 branch from 11a5407 to e0dcf30 Compare May 8, 2020 23:18
@joestringer joestringer marked this pull request as ready for review May 8, 2020 23:18
@joestringer joestringer removed the dont-merge/blocked Another PR must be merged before this one. label May 8, 2020
@joestringer
Copy link
Member Author

never-tell-me-the-odds

@gandro
Copy link
Member

gandro commented May 12, 2020

restart-ginkgo

1 similar comment
@gandro
Copy link
Member

gandro commented May 13, 2020

restart-ginkgo

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label May 13, 2020
@gandro gandro added dont-merge/needs-rebase This PR needs to be rebased because it has merge conflicts. and removed requires-janitor-review ready-to-merge This PR has passed all tests and received consensus from code owners to merge. labels May 13, 2020
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label May 13, 2020
joestringer and others added 5 commits May 13, 2020 09:30
[ upstream commit 3689e42 ]

Make use of Context to share more test preparation for the CIDR tests,
and allow the toCIDR / fromCIDR tests to be split out to validate them
separately.

Signed-off-by: Joe Stringer <joe@cilium.io>
[ upstream commit ba9b781 ]

This docker network will be used by upcoming CIDR policy tests, so share
it in the common helpers package.

Signed-off-by: Joe Stringer <joe@cilium.io>
[ upstream commit bf47589 ]

Previously, we only tested that CIDR policy does not unintentionally
open up connectivity to containers that reside within the CIDR range.

This test now actually validates that the "fromCIDR" policy applies to
traffic from outside Cilium's control, assuming it resides within the IP
range allowed by the policy.

Signed-off-by: Joe Stringer <joe@cilium.io>
[ upstream commit baf10f8 ]

Signed-off-by: Joe Stringer <joe@cilium.io>
[ upstream commit bad730c ]

Backporter's notes: Had to rebase against refactored functions
resolve_srcid_ipv[46]() and fix up bpf.sha.

Signed-off-by: Will Deuschle <wdeuschle@palantir.com>
Signed-off-by: Joe Stringer <joe@cilium.io>
@joestringer
Copy link
Member Author

never-tell-me-the-odds

@gandro gandro merged commit 6089581 into v1.7 May 14, 2020
@gandro gandro deleted the pr/v1.7-backport-2020-05-07 branch May 14, 2020 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dont-merge/needs-rebase This PR needs to be rebased because it has merge conflicts. kind/backports This PR provides functionality previously merged into master. ready-to-merge This PR has passed all tests and received consensus from code owners to merge.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants