Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

envoy: Update to release 1.21.0 #18748

Merged
merged 1 commit into from Feb 17, 2022
Merged

Conversation

jrajahalme
Copy link
Member

@jrajahalme jrajahalme commented Feb 9, 2022

Update Envoy to release 1.21.0. Envoy Go API is updated to contain
the generated validation code.

cilium-envoy image is updated to support the newEgressMarkSourceEndpointId
option for the Cilium listener filter. NPDS field 'Policy' is renamed as
'EndpointID'. 'Policy' field was not used for anything, so might as
well recycle it while this API is not yet public.

Envoy retries may fail on "address already in use" when the original
source address and port are used on upstream connections. Cilium
typically does this in the egress proxy listeners. Fix this by using a
Cilium Envoy build that always sets SO_REUSEADDR when original source
address and port is used.

Signed-off-by: Jarno Rajahalme jarno@isovalent.com

Cilium host proxy is updated to Envoy release 1.21.0

@jrajahalme jrajahalme added area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. release-note/misc This PR makes changes that have no direct user impact. labels Feb 9, 2022
@jrajahalme jrajahalme requested a review from a team as a code owner February 9, 2022 10:46
@jrajahalme jrajahalme requested a review from a team February 9, 2022 10:46
@jrajahalme jrajahalme requested review from a team as code owners February 9, 2022 10:46
@jrajahalme jrajahalme marked this pull request as draft February 9, 2022 10:47
@jrajahalme jrajahalme marked this pull request as ready for review February 9, 2022 11:38
@jrajahalme
Copy link
Member Author

jrajahalme commented Feb 9, 2022

/test

Job 'Cilium-PR-K8s-GKE' failed and has not been observed before, so may be related to your PR:

Click to show.

Test Name

K8sKafkaPolicyTest Kafka Policy Tests KafkaPolicies

Failure Output

FAIL: Failed to resolve kafka-service DNS entry in pod empire-hq-69b8866d77-hhkks

If it is a flake, comment /mlh new-flake Cilium-PR-K8s-GKE so I can create a new GitHub issue to track it.

@jrajahalme
Copy link
Member Author

/test-only --focus="K8sPolicy.*abel.*L7"

@jrajahalme
Copy link
Member Author

/test-only --focus="K8sPolicyTest.*using namespace label and L7"

@jrajahalme
Copy link
Member Author

/test-only --focus="K8sPolicyTest.*using.namespace.label.and.L7"

@jrajahalme
Copy link
Member Author

/test-1.23-net-next

@jrajahalme
Copy link
Member Author

/test-gke

@jrajahalme
Copy link
Member Author

Focused test run "failed" due to artifact collection failing when no tests were run:

09:59:19  Ran 0 of 401 Specs in 9.062 seconds
09:59:19  SUCCESS! -- 0 Passed | 0 Failed | 0 Pending | 401 Skipped
09:59:19  PASS

Envoy Go API is updated to contain the generated validation code.

Envoy image is updated to support the new EndpointId option for the
bpf_metadata listener filter. NPDS field 'Policy' is renamed as
'EndpointID'. 'Policy' field was not used for anything, so might as
well recycle it while this API is not yet public.

Envoy retries may fail on "address already in use" when the original
source address and port are used on upstream connections. Cilium
typically does this in the egress proxy listeners. Fix this by using a
Cilium Envoy build that always sets SO_REUSEADDR when original source
address and port is used.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
@maintainer-s-little-helper maintainer-s-little-helper bot added this to Needs backport from master in 1.9.13 Feb 18, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot added this to Needs backport from master in 1.11.2 Feb 18, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot added this to Needs backport from master in 1.10.8 Feb 18, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot moved this from Needs backport from master to Backport pending to v1.10 in 1.11.2 Feb 22, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot moved this from Needs backport from master to Backport pending to v1.9 in 1.9.13 Feb 22, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot moved this from Needs backport from master to Backport pending to v1.10 in 1.10.8 Feb 22, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot moved this from Backport pending to v1.9 to Backport done to v1.9 in 1.9.13 Feb 23, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot moved this from Backport pending to v1.10 to Backport done to v1.10 in 1.10.8 Feb 23, 2022
@joestringer joestringer added backport-done/1.11 The backport for Cilium 1.11.x for this PR is done. and removed backport-pending/1.11 labels Feb 23, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot moved this from Backport pending to v1.10 to Backport done to v1.11 in 1.11.2 Feb 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. backport-done/1.11 The backport for Cilium 1.11.x for this PR is done. release-note/misc This PR makes changes that have no direct user impact.
Projects
No open projects
1.10.8
Backport done to v1.10
1.11.2
Backport done to v1.11
1.9.13
Backport done to v1.9
Development

Successfully merging this pull request may close these issues.

None yet

8 participants