Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

iptables: Read CNI chaining mode from CNI config manager #30766

Merged

Commits on Feb 28, 2024

  1. iptables: Read CNI chaining mode from CNI config manager

    CNI chaining mode option has been moved to the CNI cell in commit
    1254bf4.
    
    Since it is not a global config option anymore, iptables manager will
    not see any change to that value, and its field `CNIChainingMode` will
    always be an empty string.
    Thus, with the following config option values:
    
    - "enable-endpoint-routes": true
    - "cni-chaining-mode": "aws-cni"
    
    the delivery interface referenced in the rules installed by the manager
    is "lxc+" instead of "eni+".
    
    This commit fixes this adding a CNI config manager reference to the
    iptables manager parameters, in order to read the current setting for
    the chaining mode during rules installation.
    
    Fixes: 1254bf4 ("daemon / cni: move to Cell, watch for changes")
    
    Signed-off-by: Fabio Falzoi <fabio.falzoi@isovalent.com>
    pippolo84 committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    8a3861c View commit details
    Browse the repository at this point in the history