New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
daemon: Fix session affinity map creation #12134
Conversation
test-me-please |
retest-4.19 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Minor nit. Is the CI failure a flake or potentially caused by this PR?
K8sDatapathConfig Etcd Check connectivity failure: |
Known CI flake on 4.19; I think not tracked yet though. |
retest-4.19 |
4.19 hit the same Etcd flake. |
test-me-please |
e0111ae
to
34c4247
Compare
Hit |
retest-net-next |
34c4247
to
4561293
Compare
test-me-please |
- Add session affinity to auto-{enable,disable} msgs. - Make more clear that auto-enabling does not guarantee that the listed features will be enabled. Signed-off-by: Martynas Pumputis <m@lambda.lt>
And move all related helpers from cmd/daemon_main.go into cmd/kube_proxy_replacement.go to not bloat over the former. Signed-off-by: Martynas Pumputis <m@lambda.lt>
Previously, initKubeProxyReplacementOptions() was called after initMaps() which when running with --kube-proxy-replacement=probe and --enable-session-affinity=false resulted in the session affinity -related BPF maps not being created. An example error log message which illustrated that: level=warning msg="Unable to add entry to affinity match map" backendID=5 error="Unable to get object /sys/fs/bpf/tc/globals/cilium_lb_affinity_match: no such file or directory" serviceID=11 subsys=service Fixes: bcdcf9b ("daemon: Move kubeProxyReplacement init after connect to k8s") Reported-by: Jarno Rajahalme <jarno@covalent.io> Signed-off-by: Martynas Pumputis <m@lambda.lt>
This PR fixes the BPF session affinity -related maps creation, improves logging of auto detection and moves the replacement helpers into
cmd/kube_proxy_replacement.go
.Reviewable per commit.
Fixes: bcdcf9b ("daemon: Move kubeProxyReplacement init after connect to k8s")
Reported-by: Jarno Rajahalme jarno@covalent.io
Fix #12118.