Jaeryn
ef14c8d186
Fix a bug that created a random egress entry when deleting from ingress-centric policy group. Also added a check to add multiple default entries to prevent deletion of once policy to affect another. ( #551 )
2020-04-29 14:32:22 -07:00
tamilmani1989
6ac5e8c9f0
CNI Ipv6 Dualstack Support ( #538 )
...
* added cniv6 plugin
* cni ipv6 base framework
* removed unwanted changes
* added ipv6 change
* added cni ipv6 changes
* drop neighbor discovery messages to other VMs
* fixed issues
* fixed unit tests
* fix nil dereference
* addressed comments
* ipv6 fixes and changes
* addressed comments
2020-04-15 22:30:48 -07:00
aegal
de708ee6e9
Merge pull request #547 from Azure/actionNameUpdate
...
Update action to block and increase priority for allow
2020-04-15 22:23:55 -07:00
Ali Egal
dd305ce791
address comments
2020-04-15 20:49:10 -07:00
Ali Egal
459f2db1d8
need to update action to block, update priority
2020-04-15 15:44:18 -07:00
Ali Egal
80f00e4bb7
need to update action to block, update priority
2020-04-15 15:34:14 -07:00
Jaeryn
8162a2bc45
Check Processed NP Map & Add Update Pod Conditions ( #546 )
...
* Check raw and processed network policy maps separately in add operation.
* Remove failed & succeeded pods from ipset
2020-04-14 11:19:32 -07:00
Mathew Merrick
6fbeff5936
remove git submodule ( #545 )
2020-04-13 13:48:07 -07:00
Jaeryn
5bcce3b1ac
Revising add and update network policy logic in npm ( #544 )
2020-04-13 12:35:10 -07:00
Jaeryn
e98b789916
Fix NPM Bugs ( #542 )
...
* Remove old npm chains which were causing errors on uninit
* Utilize rawNpMap and refrain from updating policies with no change.
* redacted
* add added policy to processedNpMap
2020-04-10 17:54:24 -07:00
aegal
53198787d2
Merge pull request #535 from Azure/consumeFromNCContainerRequest
...
Consume ACL for APIPA Endpoint from CreateNC Req
2020-04-09 15:06:16 -07:00
PrIce Qian
512ffed5ef
Add IPAM unit tests && Using ginkgo replace the origin go test ( #508 )
...
* 1. Add IPAM unit tests
2. Using ginkgo instead of the origin go test
* fix go mod
2020-04-09 01:10:24 -07:00
Ali Egal
e44eca0afa
typo
2020-04-07 22:32:22 -07:00
Ali Egal
f34a463dc7
placeholder for src/dest IP's + validation
2020-04-07 22:14:18 -07:00
Mathew Merrick
00da4e2393
Change pipeline storage account ( #541 )
...
* update pipeline
* update pipeline
* k8s version 1.17 in test
* update pipeline timeout
2020-04-07 17:19:05 -07:00
Jaeryn
38dc38e898
Move NPM from dep to go mod ( #539 )
...
* Moving NPM to use gomod
* Vendoring via go mod
* add more npm tests
* remove go dep specific commands
* adding pipeline changes
2020-04-06 16:18:17 -07:00
Jaeryn
2427888550
Lock update operations to prevent race in between updates. ( #536 )
...
* Lock update operations to prevent race in between updates.
* fixing tests
* fixing nwpolicy files
2020-04-03 13:31:02 -07:00
Ali Egal
404eb16aac
restrict to only APIPA
2020-04-03 12:45:42 -07:00
Mathew Merrick
79d8758228
ipv6 don't reserve gateway address ( #537 )
2020-04-02 20:24:51 -07:00
Ali Egal
7758c58462
include a nil check on pointer
2020-04-02 13:34:06 -07:00
Mathew Merrick
d2ba9bb2f3
IPv6 Node IPAM ( #532 )
...
* switch to go mod
* pull node spec from apiserver
* carve v6 addresses
* address pool
* update go mod vendor
* build image
* build image
* build image
* separate go mod for npm
* add manager ipv6 ipam test
* added comments and addressed feedback
* address comments
* address comments
* address comments
* check if loaded
* address comments
* update pipeline
* update pipeline
* update test message
Co-authored-by: Ubuntu <azureuser@k8s-agentpool1-23761303-0.2w0jm2xwiahebmp33klngrlq1d.xx.internal.cloudapp.net>
2020-04-02 11:01:05 -07:00
Ali Egal
a6ddef1d67
change struct name
2020-04-02 09:23:27 -07:00
Ali Egal
4feb4aeb7e
remove folder
2020-04-01 21:08:50 -07:00
Ali Egal
73ebf2deb2
testing build issue with importing hcsshim
2020-04-01 21:04:16 -07:00
Ali Egal
7db604dff4
remove unintended folder
2020-04-01 19:28:06 -07:00
Ali Egal
143cb49f64
fixing build error
2020-04-01 19:10:47 -07:00
Ali Egal
8bc949b9ac
revert last commit
2020-04-01 17:31:18 -07:00
Ali Egal
42ff442cb2
remove line
2020-04-01 17:29:04 -07:00
Ali Egal
ff140673e1
addressing comments
2020-04-01 14:28:00 -07:00
tamilmani1989
dc1ecbfd95
added ipv6 changes ( #534 )
2020-04-01 13:21:47 -07:00
Ali Egal
eaafe09dd9
Consume ACL for APIPA Endpoint from CreateNC Req
2020-03-31 20:06:06 -07:00
Ali Egal
f452123480
Consume ACL for APIPA Endpoint from CreateNC Req
2020-03-31 20:03:58 -07:00
Paul Johnston
47f6d8f3d9
Adding telemetry to network monitor ( #533 )
...
* Adding telemetry to network monitor
* Removed newlines per Tamilmanis request
* Triggering tests
* Triggering tests
* Triggering tests
* Removed telemetry from unit tests
2020-03-31 19:01:35 -07:00
Ashvin Deodhar
a4e9e99406
Avoid logging the auth token ( #523 )
...
As DNC makes the call to CNS to publish NC, CNS logs the incoming request.
This prints the auth token. This change removes the auth token from getting
into the logs.
2020-03-26 09:41:51 -07:00
Paul Johnston
0b62fc40c7
Fixing windows test failure ( #531 )
...
* Testing windows change
* Found error
2020-03-18 17:57:34 -07:00
Paul Johnston
17e2c7d404
Adding network monitor capabilities for prerouting and postrouting ebrules ( #527 )
...
* About to take debugging comments out
* Removed debugging statements and tested again
* Removed more debugging statements and unused method
* Made changes suggested by Tamilmani, tested again.
* Made spacing changes suggested by Tamilmani
* Triggering new tests to run
2020-03-18 14:02:31 -07:00
Paul Johnston
1d737cf564
Added DisableHairpinOnHostInterface:true to conflist to fix duplicate packets issue ( #530 )
2020-03-18 13:58:09 -07:00
shchen
b69f72ea3f
Update npm image version to use the latest v1.0.33 ( #521 )
2020-03-06 13:22:52 -08:00
Mathew Merrick
fea4205c69
Update Install-CniPlugin.ps1 ( #520 )
2020-02-28 14:29:22 -08:00
shchen
2ecca215be
Fix unnecessary consecutiveAdd for windows ( #509 )
...
* Fix unnecessary consecutiveAdd for windows(#367 ).
* Fix unnecessary consecutiveAdd for windows(#367 ).
* Fix unnecessary consecutiveAdd for windows(#367 ).
* Fix unnecessary consecutiveAdd for windows(#367 ).
2020-02-26 11:03:12 -08:00
Paul Johnston
a01afb7a93
Added EB rule for ip addresses in conflist for linux ( #505 )
...
* Added EB rule for ip addresses in conflist for linux
* Made methods more generic and removed line from endpoint struct
* Adding log statement
* Fixed syntax error
* Made review2 changes
* Made review3 changes
* Made method lowercase
2020-02-21 14:35:37 -08:00
Mathew Merrick
358736681c
Upgrade packages at image build time ( #504 )
...
* upgrade packages at image build time
* update pipeline to use MCR
* use mcr
* use mcr
* use mcr
* use mcr
* use mcr
* use mcr
* env
* env
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipeline
* update pipelines
* update pipelines
* update pipelines
2020-02-21 13:38:14 -08:00
Sathya Singh
b18584d100
Merge pull request #503 from Azure/CNSSnapshot
...
Add AI Events and CNS NC Snapshots.
2020-02-14 13:40:40 -08:00
Mathew Merrick
c5163cf63a
Test NPM in E2E ( #478 )
...
* update pipeline to test dirty NPM
2020-02-14 11:09:54 -08:00
Sathya Singh
ef49759d52
Addressed review comments.
2020-02-13 13:36:36 -08:00
Sathya Singh
a4c1463ea0
Addressed review comments and added UTs.
2020-02-12 19:15:10 -08:00
Sathya Singh
2d5708c4a0
Fix ACN issue 436 for surfacing CNI errors to kubelet. ( #501 )
2020-02-12 17:17:30 -08:00
Sathya Singh
74aa0393c6
Addressed review comments.
2020-02-12 13:03:00 -08:00
Sathya Singh
0308cd07db
Add AI Events and CNS NC Snapshots.
2020-02-11 18:24:40 -08:00
Jaeryn
0576688c57
copy kube-proxy tolerations NPM may run on customer tainted nodes ( #493 )
2020-02-07 11:53:22 -08:00