Граф коммитов

723 Коммитов

Автор SHA1 Сообщение Дата
Jaeryn ef14c8d186
Fix a bug that created a random egress entry when deleting from ingress-centric policy group. Also added a check to add multiple default entries to prevent deletion of once policy to affect another. (#551) 2020-04-29 14:32:22 -07:00
tamilmani1989 6ac5e8c9f0
CNI Ipv6 Dualstack Support (#538)
* added cniv6 plugin

* cni ipv6 base framework

* removed unwanted changes

* added ipv6 change

* added cni ipv6 changes

* drop neighbor discovery messages to other VMs

* fixed issues

* fixed unit tests

* fix nil dereference

* addressed comments

* ipv6 fixes and changes

* addressed comments
2020-04-15 22:30:48 -07:00
aegal de708ee6e9
Merge pull request #547 from Azure/actionNameUpdate
Update action to block and increase priority for allow
2020-04-15 22:23:55 -07:00
Ali Egal dd305ce791 address comments 2020-04-15 20:49:10 -07:00
Ali Egal 459f2db1d8 need to update action to block, update priority 2020-04-15 15:44:18 -07:00
Ali Egal 80f00e4bb7 need to update action to block, update priority 2020-04-15 15:34:14 -07:00
Jaeryn 8162a2bc45
Check Processed NP Map & Add Update Pod Conditions (#546)
* Check raw and processed network policy maps separately in add operation.

* Remove failed & succeeded pods from ipset
2020-04-14 11:19:32 -07:00
Mathew Merrick 6fbeff5936
remove git submodule (#545) 2020-04-13 13:48:07 -07:00
Jaeryn 5bcce3b1ac
Revising add and update network policy logic in npm (#544) 2020-04-13 12:35:10 -07:00
Jaeryn e98b789916
Fix NPM Bugs (#542)
* Remove old npm chains which were causing errors on uninit

* Utilize rawNpMap and refrain from updating policies with no change.

* redacted

* add added policy to processedNpMap
2020-04-10 17:54:24 -07:00
aegal 53198787d2
Merge pull request #535 from Azure/consumeFromNCContainerRequest
Consume ACL for APIPA Endpoint from CreateNC Req
2020-04-09 15:06:16 -07:00
PrIce Qian 512ffed5ef
Add IPAM unit tests && Using ginkgo replace the origin go test (#508)
* 1. Add IPAM unit tests
2. Using ginkgo instead of the origin go test

* fix go mod
2020-04-09 01:10:24 -07:00
Ali Egal e44eca0afa typo 2020-04-07 22:32:22 -07:00
Ali Egal f34a463dc7 placeholder for src/dest IP's + validation 2020-04-07 22:14:18 -07:00
Mathew Merrick 00da4e2393
Change pipeline storage account (#541)
* update pipeline

* update pipeline

* k8s version 1.17 in test

* update pipeline timeout
2020-04-07 17:19:05 -07:00
Jaeryn 38dc38e898
Move NPM from dep to go mod (#539)
* Moving NPM to use gomod

* Vendoring via go mod

* add more npm tests

* remove go dep specific commands

* adding pipeline changes
2020-04-06 16:18:17 -07:00
Jaeryn 2427888550
Lock update operations to prevent race in between updates. (#536)
* Lock update operations to prevent race in between updates.

* fixing tests

* fixing nwpolicy files
2020-04-03 13:31:02 -07:00
Ali Egal 404eb16aac restrict to only APIPA 2020-04-03 12:45:42 -07:00
Mathew Merrick 79d8758228
ipv6 don't reserve gateway address (#537) 2020-04-02 20:24:51 -07:00
Ali Egal 7758c58462 include a nil check on pointer 2020-04-02 13:34:06 -07:00
Mathew Merrick d2ba9bb2f3
IPv6 Node IPAM (#532)
* switch to go mod

* pull node spec from apiserver

* carve v6 addresses

* address pool

* update go mod vendor

* build image

* build image

* build image

* separate go mod for npm

* add manager ipv6 ipam test

* added comments and addressed feedback

* address comments

* address comments

* address comments

* check if loaded

* address comments

* update pipeline

* update pipeline

* update test message

Co-authored-by: Ubuntu <azureuser@k8s-agentpool1-23761303-0.2w0jm2xwiahebmp33klngrlq1d.xx.internal.cloudapp.net>
2020-04-02 11:01:05 -07:00
Ali Egal a6ddef1d67 change struct name 2020-04-02 09:23:27 -07:00
Ali Egal 4feb4aeb7e remove folder 2020-04-01 21:08:50 -07:00
Ali Egal 73ebf2deb2 testing build issue with importing hcsshim 2020-04-01 21:04:16 -07:00
Ali Egal 7db604dff4 remove unintended folder 2020-04-01 19:28:06 -07:00
Ali Egal 143cb49f64 fixing build error 2020-04-01 19:10:47 -07:00
Ali Egal 8bc949b9ac revert last commit 2020-04-01 17:31:18 -07:00
Ali Egal 42ff442cb2 remove line 2020-04-01 17:29:04 -07:00
Ali Egal ff140673e1 addressing comments 2020-04-01 14:28:00 -07:00
tamilmani1989 dc1ecbfd95
added ipv6 changes (#534) 2020-04-01 13:21:47 -07:00
Ali Egal eaafe09dd9 Consume ACL for APIPA Endpoint from CreateNC Req 2020-03-31 20:06:06 -07:00
Ali Egal f452123480 Consume ACL for APIPA Endpoint from CreateNC Req 2020-03-31 20:03:58 -07:00
Paul Johnston 47f6d8f3d9
Adding telemetry to network monitor (#533)
* Adding telemetry to network monitor

* Removed newlines per Tamilmanis request

* Triggering tests

* Triggering tests

* Triggering tests

* Removed telemetry from unit tests
2020-03-31 19:01:35 -07:00
Ashvin Deodhar a4e9e99406
Avoid logging the auth token (#523)
As DNC makes the call to CNS to publish NC, CNS logs the incoming request.
This prints the auth token. This change removes the auth token from getting
into the logs.
2020-03-26 09:41:51 -07:00
Paul Johnston 0b62fc40c7
Fixing windows test failure (#531)
* Testing windows change

* Found error
2020-03-18 17:57:34 -07:00
Paul Johnston 17e2c7d404
Adding network monitor capabilities for prerouting and postrouting ebrules (#527)
* About to take debugging comments out

* Removed debugging statements and tested again

* Removed more debugging statements and unused method

* Made changes suggested by Tamilmani, tested again.

* Made spacing changes suggested by Tamilmani

* Triggering new tests to run
2020-03-18 14:02:31 -07:00
Paul Johnston 1d737cf564
Added DisableHairpinOnHostInterface:true to conflist to fix duplicate packets issue (#530) 2020-03-18 13:58:09 -07:00
shchen b69f72ea3f
Update npm image version to use the latest v1.0.33 (#521) 2020-03-06 13:22:52 -08:00
Mathew Merrick fea4205c69
Update Install-CniPlugin.ps1 (#520) 2020-02-28 14:29:22 -08:00
shchen 2ecca215be
Fix unnecessary consecutiveAdd for windows (#509)
* Fix unnecessary consecutiveAdd for windows(#367).

* Fix unnecessary consecutiveAdd for windows(#367).

* Fix unnecessary consecutiveAdd for windows(#367).

* Fix unnecessary consecutiveAdd for windows(#367).
2020-02-26 11:03:12 -08:00
Paul Johnston a01afb7a93
Added EB rule for ip addresses in conflist for linux (#505)
* Added EB rule for ip addresses in conflist for linux

* Made methods more generic and removed line from endpoint struct

* Adding log statement

* Fixed syntax error

* Made review2 changes

* Made review3 changes

* Made method lowercase
2020-02-21 14:35:37 -08:00
Mathew Merrick 358736681c
Upgrade packages at image build time (#504)
* upgrade packages at image build time

* update pipeline to use MCR

* use mcr

* use mcr

* use mcr

* use mcr

* use mcr

* use mcr

* env

* env

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipeline

* update pipelines

* update pipelines

* update pipelines
2020-02-21 13:38:14 -08:00
Sathya Singh b18584d100
Merge pull request #503 from Azure/CNSSnapshot
Add AI Events and CNS NC Snapshots.
2020-02-14 13:40:40 -08:00
Mathew Merrick c5163cf63a
Test NPM in E2E (#478)
* update pipeline to test dirty NPM
2020-02-14 11:09:54 -08:00
Sathya Singh ef49759d52 Addressed review comments. 2020-02-13 13:36:36 -08:00
Sathya Singh a4c1463ea0 Addressed review comments and added UTs. 2020-02-12 19:15:10 -08:00
Sathya Singh 2d5708c4a0
Fix ACN issue 436 for surfacing CNI errors to kubelet. (#501) 2020-02-12 17:17:30 -08:00
Sathya Singh 74aa0393c6 Addressed review comments. 2020-02-12 13:03:00 -08:00
Sathya Singh 0308cd07db Add AI Events and CNS NC Snapshots. 2020-02-11 18:24:40 -08:00
Jaeryn 0576688c57
copy kube-proxy tolerations NPM may run on customer tainted nodes (#493) 2020-02-07 11:53:22 -08:00