Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

k8s / policy: allow all services for toServices when using highscale ipcache #26127

Merged
merged 1 commit into from
Jun 15, 2023
Merged

k8s / policy: allow all services for toServices when using highscale ipcache #26127

merged 1 commit into from
Jun 15, 2023

Commits on Jun 14, 2023

  1. k8s, policy: enable toServices rules for high-scale ipcache 

    Normally, toServices rules only allow Endpoints that are external to the
cluster. This is to prevent conflict with entries already existing in
the ipcache.

However, this is not relevant with highscale ipcache, where podips are
normally excluded from the ipcache anyways. So, allow all services to be
specified in toServices egress rules when highscale is enabled.

Signed-off-by: Casey Callendrello <cdc@isovalent.com>
    @squeed
    squeed committed Jun 14, 2023
    Configuration menu
    Copy the full SHA
    cbb0d5c View commit details
    Browse the repository at this point in the history