Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.7 backports 2021-03-19 #15401

Merged
merged 4 commits into from Mar 22, 2021
Merged

v1.7 backports 2021-03-19 #15401

merged 4 commits into from Mar 22, 2021

Conversation

jrajahalme
Copy link
Member

Once this PR is merged, you can update the PR labels via:

$ for pr in 14488 15328 15365 15363; do contrib/backporting/set-labels.py $pr done 1.7; done

kaworu and others added 4 commits March 19, 2021 16:22
[ upstream commit 390ee46 ]

Before this patch, get_user_remote() would ignore its remote argument
when provided and always take the auto-detection path.

Signed-off-by: Alexandre Perrin <alex@kaworu.ch>
Signed-off-by: Jarno Rajahalme <jarno@covalent.io>
[ upstream commit 458c623 ]

"kubectl get secret -n kube-system cilium-ipsec-keys" outputs two lines
with "keys:", one is the real key data and other is a "managedField":

$ kubectl get secret -n kube-system cilium-ipsec-keys -o yaml | grep keys:
  keys: MyByZmM0MTA2KGdjbShhZXMpKSA3ZTE1YmZlNmQyZjczNGUzZmQ0YTEzM2FlZDU2MGQwMjEzZjBjNmRmIDEyOA==
        f:keys: {}

It makes the whole command to get the key id to fail:

$ KEYID=$(kubectl get secret -n kube-system cilium-ipsec-keys -o yaml|grep keys: | awk '{print $2}' | base64 -d | awk '{print $1}')
base64: invalid input

This will be fixed in next Kubernetes release
(kubernetes/kubernetes#96878), in the meanwhile
just use a regular expression in awk to match "keys:" at the begining.

Fixes: 4ea52ae ("cilium: encryption, docs key updates")

Signed-off-by: Mauricio Vásquez <mauricio@accuknox.com>
Signed-off-by: Mauricio Vásquez <mauricio@kinvolk.io>
Signed-off-by: Jarno Rajahalme <jarno@covalent.io>
[ upstream commit 9a058d6 ]

When using the Bugtool with "direct routing / native routing mode" enabled, we
are only getting the encryption and proxy tables (200 / 2005).

The goal of this PR is to get the route tables dynamically and remove the
hardcoded ones.

Fixes: #12250

Signed-off-by: Youssef Azrak yazrak.tech@gmail.com
Signed-off-by: Jarno Rajahalme <jarno@covalent.io>
[ upstream commit 9020c65 ]

Fixes : #15270

Signed-off-by: Gaurav Genani <h3llix.pvt@gmail.com>
Signed-off-by: Jarno Rajahalme <jarno@covalent.io>
@jrajahalme jrajahalme added kind/backports This PR provides functionality previously merged into master. backport/1.7 labels Mar 19, 2021
@jrajahalme jrajahalme requested a review from a team as a code owner March 19, 2021 16:31
@jrajahalme
Copy link
Member Author

test-backport-1.7

Copy link
Member

@kaworu kaworu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM for my changes, thanks!

@jrajahalme jrajahalme added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Mar 22, 2021
@joestringer joestringer merged commit 568a626 into v1.7 Mar 22, 2021
@joestringer joestringer deleted the pr/v1.7-backport-2021-03-19 branch March 22, 2021 23:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/backports This PR provides functionality previously merged into master. ready-to-merge This PR has passed all tests and received consensus from code owners to merge.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants