-
Notifications
You must be signed in to change notification settings - Fork 2.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix local redirect policies selecting host networked pods #18563
Fix local redirect policies selecting host networked pods #18563
Conversation
/test Job 'Cilium-PR-K8s-1.23-kernel-net-next' failed and has not been observed before, so may be related to your PR: Click to show.Test Name
Failure Output
If it is a flake, comment |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. One minor nit, the last commit refers to commit 3805bae724e7 but github doesn't recognize it. Is that meant to be 0ab4fa1 ?
Yes, I've already fixed it in both PR and commit descriptions. Was waiting to push the latest commits until the ongoing CI run is complete. Check patch is failing for the same reason. |
net-next hit #18520. All other tests passed. |
59d5a1d
to
25dcbb0
Compare
Only updated the commit message, no need to run the full CI again. |
4.19 hit #18566 All other tests passed. |
Signed-off-by: Aditi Ghag <aditi@cilium.io>
The configuration option is moved from extra args - https://artifacthub.io/packages/helm/uswitch/kiam/5.9.0. Signed-off-by: Aditi Ghag <aditi@cilium.io>
Commits da35c88 and 0ab4fa1 introduced a regression for local-redirect use cases like kiam, whereby host networked pod updates were skipped. As a result, node-local redirection for cases where LRPs select host networked pods as backends broke. Tested the fix on an EKS configured with kiam setup. Fixes: da35c88 ("k8s/watchers: don't silently ignore (*K8sWatcher).updatePodHostData error") Fixes: 0ab4fa1 (pkg/k8s: ignore certain ipcache errors) Fixes: cilium#16920 Signed-off-by: Aditi Ghag <aditi@cilium.io>
Test kiam like use cases (LRP select host networked pods) with an address matcher LRP - https://docs.cilium.io/en/latest/gettingstarted/local-redirect-policy/#addressmatcher. Signed-off-by: Aditi Ghag <aditi@cilium.io>
Signed-off-by: Aditi Ghag <aditi@cilium.io>
568cd70
to
6769ab0
Compare
@aanm Are you planning to review this PR further? Other reviews are in, and your review comments have been addressed. |
See commit messages.
Fixes: da35c88 ("k8s/watchers: don't silently ignore (*K8sWatcher).updatePodHostData error")
Fixes: 0ab4fa1 ("pkg/k8s: ignore certain ipcache errors")
Related: #16920
Release note