Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

daemon: Implement route-based device detection #17219

Merged
merged 2 commits into from
Oct 1, 2021
Merged

daemon: Implement route-based device detection #17219

merged 2 commits into from
Oct 1, 2021

Commits on Sep 30, 2021

  1. daemon: Implement route-based device detection 

    This reimplements the device detection logic to use the route
information rather than detecting devices based on k8s nodeIP and
the device with the default route.

The devices are discovered by finding all devices mentioned in global
unicast routes and filtering out cilium-managed devices by prefix.

The reason for introducing DeviceManager is to later add support for
dynamically reconfiguring the datapath for devices added at runtime.
Also the detected devices are now also used for host firewall and
bandwidth manager so makes sense for this logic to be moved out.

Fixes: cilium#15960

Signed-off-by: Jussi Maki <jussi@isovalent.com>
    @joamaki
    joamaki committed Sep 30, 2021
    Configuration menu
    Copy the full SHA
    6331220 View commit details
    Browse the repository at this point in the history

  2. daemon: Do not detect devices for IPsec 

    Since IPsec is not yet using the detected devices, disable
detection if only IPsec is enabled.

This fixes a failure in IPsec L7 tests. Root cause still
unknown why detecting the devices causes issues.

Signed-off-by: Jussi Maki <jussi@isovalent.com>
    @joamaki
    joamaki committed Sep 30, 2021
    Configuration menu
    Copy the full SHA
    78faa05 View commit details
    Browse the repository at this point in the history