Casey Callendrello
Casey Callendrello
For example, look at https://github.com/cilium/cilium-cli/actions/runs/4302151503/jobs/7500262699 -- the only log entry provided is `Error from server: Get "https://10.122.240.4:10250/containerLogs/kube-system/cilium-cli-fqz8k/test?timestamps=true": No agent available`. In reality, thanks to GCP's log aggregation, the real failure...
This adds an arbitrary plain-text Log field to policies. That log field is intended to make it easier to find policies in Hubble verdicts. While the Labels mechanism does work,...
Test that policy log entries are correctly added in Hubble flows.
Background: the ToFQDN policy feature works by assigning labels with source `fqdn:` to IP addresses as names are learned. For example, the IP address 1.1.1.1 may have the labels `(reserved:world,...
This demonstrates a possible implementation of ordered policy.
As noticed in https://github.com/cilium/cilium/pull/42815, the ipcache metadata layer does not handle mutations from the same resource correctly. When that PR is merged and backported, this can be closed. https://github.com/cilium/cilium/commit/228a293646c4872216c598a0196a2b40ddf91516 is...
This is (almost) user-facing API, so it's nice to use a float here so that there is "always" arbitrary room for users to insert entries between two existing entries. This...
- change config file - bump action and lint version - fix minor issues found.
This allows IPAM plugins to specify host-level interfaces to the delegating plugin when relevant. Use cases: - specifying macvlan master - indicating which interface is to be used as the...
This changes the lifecycle of an L4Policy, to ensure it is not disconnected from the SelectorCache too soon and thus stops receiving incremental updates. Policies contain selectors, and those selectors...