Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

docs: Document limitation for kernels without netns cookie #17575

Merged
merged 1 commit into from
Oct 12, 2021
Merged

docs: Document limitation for kernels without netns cookie #17575

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
3 changes: 3 additions & 0 deletions Documentation/gettingstarted/kubeproxy-free.rst
View file
Open in desktop
Expand Up @@ -1334,6 +1334,9 @@ Limitations
release introduces ``EndpointSliceMirroring`` controller that mirrors custom ``Endpoints``
resources to corresponding ``EndpointSlices`` and thus allowing backing ``Endpoints``
to work. For a more detailed discussion see :gh-issue:`12438`.
* When deployed on kernels older than 5.7, Cilium is unable to distinguish between host and
pod namespaces due to the lack of kernel support for network namespace cookies. As a result,
Kubernetes services are reachable from all pods via the loopback address.

Further Readings
################
Expand Down