Граф коммитов

1695 Коммитов

Автор SHA1 Сообщение Дата
jay vyas 2df9d27b73
Update install-cni-plugin.sh (#1792)
* Update install-cni-plugin.sh

* Update scripts/install-cni-plugin.sh

---------

Co-authored-by: Evan Baker <rbtr@users.noreply.github.com>
2023-04-30 20:52:30 +00:00
Paul Yu b02110f59a
Dualstack overlay cni (#1925) 2023-04-29 14:50:44 -07:00
Hunter Gregory 61aae0371b
perf: [WIN-NPM] add all cached NetworkPolicies to a Pod at once (#1893)
* cherry-picking stuff from apply in background POC

* add all policies poc

* add debug prints

* fix deadlock

* fix other GetPolicy deadlock

* update whitespace in yamls

* properly merge

* properly merge 2

* add ACLs in batches

* cleanup errors

* lint and log

* persist state as we add

* refactor into function so we can do UTs on batching

* fix lint

* batch struct

* successful policies

* reduce batch limit to 30
2023-04-26 08:33:50 -07:00
Vipul Singh dcd55b32d0
ci: [CNI] Add restart node in stage in the load test of cni pipeline (#1916) 2023-04-21 03:19:17 +00:00
Evan Baker cc6aaf580d
update nnc printcols for kubectl output (#1908)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-04-20 03:24:03 +00:00
Hunter Gregory aa163aad3f
perf: [WIN-NPM] apply ipsets in background (#1875)
* wip

* fix UT by applying dataplane immediately for RemovePolicy()

* configmap options for apply in background

* fix deadlocks

* better logging

* rename config variables, update default config, change shouldApply check

* update configmap values

* FIXME: remove tmp commit overriding applyDP config (using for pipeline tests)

* optimize applying ipsets for add policy

* cleanup code and finalize apply ipsets for netpols

* flip order of if statement

* UTs. address comments. fix netpol behavior by waiting to start pod controller

* all UTs except ones related to issue #1729

* remove bootup phase stuff

* fix lints and move applyinbackground to toggle

* fix lint

* don't check isWindows every time

* use diff var for applyinbackground

* fix lint
2023-04-19 13:46:18 -07:00
Camryn Lee 3f1c159256
ci: validate pods and systemd-networkd restart for PRs (#1909)
* update script to check cns in memory and add to pr pipeline

* adding stage to both overlay and podsubnet cilium stages

* add exit case if priveleged pod is not found

* check status of priv pod

* call ds status before exit

* install cilium ds with kubectl and not helm for systemd-networkd initcontainer patch

* upload cilium ds

* adding files for cilium-agent and cilium-operator deployment

* update cilium ds

* addressing comments
2023-04-19 11:20:22 -07:00
Camryn Lee 08d3fb1f26
ci: cns writes cilium conflist for PR tests (#1917)
* cns writes cilium conflist for PR test clusters

* update volume mounts

* fix configmap args

* conflist mount

* updating conflist file path
2023-04-18 20:42:59 +00:00
Paul Yu fec45f9e18
fix CNS client (#1920)
* case insensitive fix

* cnsclientfix Do()
---------

Co-authored-by: paulyu <paulyu@microsoft.com>
2023-04-18 18:28:48 +00:00
tamilmani1989 a82b312995
Set constant mac for host veth interface in transparent vlan mode (#1906)
* set constant mac for host veth interface

* fixed a race issue in transparent-vlan where delete can happen after add and removes route add by ADD call

* moved log to place where its executed

* enable proxy arp on bridge to allow public connectivity from apipa interface

* validate newly created namespace is not same as host namespace

* addressed comments and added UTs

* fixed cni delete call for linux multitenancy

* lint fixes

* windows lint fixes

* lint fixes

* fix issues with network namespace creation and vlan interface creation

* Removed deletehostveth flag and delete host veth on delete endpoint trigger

* lint fix

* address comment
2023-04-17 14:26:00 -07:00
rjdenney a024d7dc73
Fix incorrect error "UnsupportedAPI" returned by CNI (#1889)
* fix dualNIC log error and add an UT

* add an UT

* fix UT

* fix UT

* fix UT

* fix UTs

* fix comments

* fix linter issue

* fix Ashvin's comments

* fix comments

* fix comments

* fix linter issue

---------

Co-authored-by: paulyu <paulyu@microsoft.com>
2023-04-14 19:22:46 -07:00
rjdenney cf5d99b5ec
CNS ipam and client changes to address comments (#1913)
* Update for previous comments

* adding tests

* fix linter issues
2023-04-14 19:33:13 +00:00
Hunter Gregory d9104f06f7
test: expand KWOK scripts to test deletions and more (#1910)
* correct num acls

* print out pods for debugging

* fix latency value printed out

* unapplied netpols and delete chaos

* print out new args

* simplify kwok install and run script

* fix typo

* example run

* fix sleep and num ipsets

* better run-kwok.sh

* fix sleep

* fix run kwok

* fix pipe

* fix labels on pods

* fix delete

* add connectivity to readme

* Update README.md

* fix printing

* wait for pods to come up after deleting

* 'all' option
2023-04-14 10:10:40 -07:00
tamilmani1989 1ec3abdaf9
Delete host veth interface on endpoint creation error in transparent-vlan mode (#1892)
* deletion of host veth interface on error in transparent_vlan mode

* fixed a typo character

* Fix lint issues

* Windows lint fix

* Windows lint fix

* add netio import

* Fixed newly added ut

* reverting pre-push change

* fix a typo
2023-04-13 08:43:44 +00:00
dependabot[bot] 3b5706397a
deps: bump github.com/spf13/cobra from 1.6.1 to 1.7.0 in /dropgz (#1894) 2023-04-12 23:26:58 +00:00
Hunter Gregory f48d9b82ed
ci: [CNS] fix cns-manifest-build parameter (#1907)
fix cns-manifest-build by adding quotes around OS_VERSIONS
2023-04-12 10:27:22 -07:00
jacobbaek c565c5514a
Update npm.md (#1911)
we have to use same URL with [Official doc](https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-network/kubernetes-network-policies.md)
Also, the old URL uses older container image version.
2023-04-12 09:54:15 -07:00
Hunter Gregory 026c201d0d
fix: [WIN-NPM] process updatePods in fifo order (#1856)
* process updatePods in fifo order

* fix lint

* better UT

* comments and better naming

* stop skipping UTs

* fix lint

* redesign

* dequeue returns nil when cache is empty

* Revert "dequeue returns nil when cache is empty"

This reverts commit 3e8d1872a8.

* requeue if node name has changed

* Revert "Revert "dequeue returns nil when cache is empty""

This reverts commit 3f5f99da1f.

* UT for nil result from dequeue
2023-04-12 09:52:31 -07:00
Hunter Gregory d7fc7e257c
ci: [WIN-NPM] remove ws19 build (#1844)
* remove NPM build for ws19

* set OS versions by variable in manifest-build

---------

Co-authored-by: Vamsi Kalapala <vakr@microsoft.com>
2023-04-11 14:34:58 -07:00
Hunter Gregory ddb3417cad
fix: [WIN-NPM] allow readiness probes (#1887)
* get node IP

* add allow-host-to-endpoint ACL

* update ACL ID to be equal to other ACLs in the netpol

* add node ip to acl

* UTs and make node IP a part of pMgr cfg

* fix skip test logic from #1857

* fix pMgr UTs and prom metrics

* fix lints and add comments

* fix UT and prom metrics for linux

* UT for getting node IP

* revert skipTest change

* error out if node IP is an empty string

* update logging for node ip and only get node ip for windows

---------

Co-authored-by: Vamsi Kalapala <vakr@microsoft.com>
2023-04-11 14:34:17 -07:00
Vipul Singh 44fb03eb5f
ci: [CNI] Load testing for cilium cni (#1871)
ci:[CNI] Load testing for cilium cni
2023-04-11 18:39:51 +00:00
Camryn Lee e792ef5705
CNS writes Cilium Conflist (#1901)
* implement cilium conflist generator

* add cilium conflist for generator test

* update generator-windows

* cleaning up generator constants
2023-04-11 15:41:54 +00:00
ZetaoZhuang 5f89e378ba
add logs for home az monitor (#1899)
* add logs for home az monitor
2023-04-11 02:15:48 +00:00
ZetaoZhuang 76822f4de5
validating home az value (#1902)
validate home az value
change default PopulateHomeAzCacheRetryIntervalSecs value from 15 to 30
2023-04-10 22:07:34 +00:00
Hunter Gregory 83104c74f9
ci: [WIN-NPM] fix download failures in Cyclonus Pipeline (#1903)
remove artifact download for cyclonus test
2023-04-10 09:34:30 -07:00
ZetaoZhuang aec0bf9d67
fix: print DeleteNetworkContainerRequestBody correctly in log (#1896)
* fix: print DeleteNetworkContainerRequestBody correctly in log

* align String() with others
2023-04-07 20:10:53 +00:00
John Payne 7546aacf69
fix: [Telemetry] Prevent telemetry connect if no binary path (#1883)
* Prevent telemetry connect if no binary path

* agnostic calls, addressing comments

* agnostic calls, addressing comments

* Correcting flow, lint

* Restoring aiwrapper

* lint error 113 cleanup

* addressing comments

* cleaning up telemetry folder error calls

* addressing comments

* addressing comments

* addressing comments

---------

Co-authored-by: jpayne3506 <johnpayne@microsoft.com>
Co-authored-by: tamilmani1989 <tamanoha@microsoft.com>
2023-04-07 09:30:54 -07:00
Evan Baker ab8858b101
consolidated dependency update for azure-ipam (#1864)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-04-06 12:49:17 -07:00
Hunter Gregory 9e337baff5
test: k8s scale testing with KWOK (#1879)
* k8s scale testing with kwok

* Update README.md

* fix netpol labels so that they apply to pods

* test connectivity

* parameterize scripts

* rename scale script and update readme

* clean up readme

* add NetPol after connectivity check

* retry connectivity loops

* fix connectivity test script and netpol

* script to capture cpu/mem

* fix typo in help

* kwok kubeconfig

* fix cpu and mem capture
2023-04-06 12:34:53 -07:00
Hunter Gregory 626582661c
fix: [WIN-NPM] filter HNS endpoints (#1848)
* filter endpoints

* UTs

* fix: fake wrapper never tracked Flags for remote endpoints

* fix lints and address comment

* fix lints

* fix lint

* golint timeout from 10 to 15m

* undo golint timeout change. needs to happen in master

* try to fix lints in hnsv2wraper

* wrap checks
2023-04-06 12:32:58 -07:00
Nawaz Hussain K afe51b4712
fix: update nodeAffinity labels for azcni v1 manifests (#1898)
update nodeAffinity labels for azcni v1 manifests

- drops `kubernetes.azure.com/cluster`
- updates `beta.kubernetes.io/os` to `kubernetes.io/os`

Solves: https://github.com/Azure/azure-container-networking/issues/1897
2023-04-06 09:32:22 -07:00
dependabot[bot] 4e94aca307
deps: bump github.com/Azure/azure-container-networking from 1.4.45 to 1.4.46 in /azure-ipam (#1895) 2023-04-05 17:54:30 +00:00
Ramiro 6048ba2b97
Adding Pprof register method (#1885)
* adding pprof register method that can be invoked in multiple paths

* fixing lint issues
2023-04-05 15:40:15 +00:00
Ashish Nair 88f70b1ecc
[Feature: Vnet Scale]: Added the vnet block mode of operation for the NC Type in the NNC (#1872)
Added the vnet block mode of operation for the NC Type
2023-04-05 02:10:55 +00:00
dependabot[bot] a8fa438e82
deps: bump github.com/docker/docker from 20.10.8+incompatible to 20.10.24+incompatible (#1891) 2023-04-05 00:14:10 +00:00
Hunter Gregory cdf4cbea37
ci: increase golint timeout to 25m (#1890) 2023-04-04 13:05:38 -07:00
rjdenney 3e06a07ca2
Dualstack CNS Changes (#1773)
1. Enables CNS to handle multiple NCs in NNC.
2. Adds new APIs that allows multiple IPs to be requested and released.
3. This change is needed for dualstack overlay
---------

Co-authored-by: Tim Raymond <traymond@microsoft.com>
2023-04-04 09:00:02 -07:00
Camryn Lee 2538e573a8
cilium ci: set l7proxy to false (#1884)
set l7proxy to false
2023-04-03 23:03:24 +00:00
Hunter Gregory f35403aa50
ci: increase golint timeout from 10 to 15m (#1886)
increase golint timeout from 10 to 15m
2023-04-03 13:59:48 -07:00
Evan Baker cf50ca9e4c
consolidated build dependency update (#1882)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-03-31 14:09:00 -07:00
Evan Baker 18d4c70e55
timeout after 15 minutes waiting for the NNC reconciler to start (#1861)
* timeout after 15 minutes waiting for the NNC reconciler to start

Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>

* log error and retry instead of crashing out

Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>

* add metric for nnc reconciler failed to start

Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>

---------

Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-03-31 11:11:26 -07:00
Evan Baker f8960f2888
consolidated dependency update for zapai (#1878)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-03-29 15:02:28 -07:00
Evan Baker 11604e5c4b
consolidated dependency updated for dropgz (#1877)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-03-29 15:00:32 -07:00
Evan Baker 4dfd97c274
update to go1.20 (#1781)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-03-29 10:53:21 -07:00
Saksham Mittal 3a5c4f5e31
change name to AZREnabled (#1874) 2023-03-27 15:14:16 -07:00
Hunter Gregory 0c9a726744
fix: [WIN-NPM] back-compat mitigation to PATH issue (#1867)
* fix: [WIN-NPM] update PATH so we can use debugging tools via NPM

* append to path instead of overwriting

* set original path

* Update azure-npm-capz.yaml

* add powershell to PATH in setkubeconfigpath.ps1

* remove pwsh call and undo path updates and change to setkubeconfig.ps1
2023-03-27 11:07:44 -07:00
Hunter Gregory 8fcc0849cc
test: [WIN-NPM] skip unnecessary UTs (#1857)
skip randomly failing UTs
2023-03-22 09:59:43 -07:00
dependabot[bot] 044f16dc15
deps: bump github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets from 0.7.1 to 0.11.0 (#1693) 2023-03-21 20:44:15 +00:00
Evan Baker ae8a11c7c8
add metric for tracking failure to start the controller-runtime manager (#1860)
Signed-off-by: Evan Baker <rbtr@users.noreply.github.com>
2023-03-21 09:20:26 -07:00
dependabot[bot] b77f715274
deps: bump k8s.io/client-go from 0.26.1 to 0.26.3 (#1858) 2023-03-20 20:35:19 +00:00