Fabio Falzoi

Add support for string to int slice conversion

1

This PR adds support for a string to int slice conversion. The supported format is a space separated list of ints encoded as a string. An use case for this...

The current structure of the operator makes impossible to use it in control-plane unit test framework. Specifically, the 3 main blockers are: 1. all the code in the `main` package...

Reconcile iptables rules in case of runtime device updates

15

iptables rules manager currently exposes some methods to reinstall rules after a datapath reconfiguration (`loader.Reinitialize`). This PR changes the manager so that it dynamically reconcile the iptables rules every time:...

[WIP] Device reconciliation test

2

-- DO NOT MERGE --

iptables: Fix `New port number` case in TestAddProxyRules{v4,v6}

3

The third part of the `TestAddProxyRulesv4` has a comment stating: `// New port number, adds new ones, deletes stale rules. Does not touch OLD_ chains` But it actually uses the...

Bugtool commands list generation improvements

3

Miscellaneous improvements to increase modularity and reusability of the bugtool helpers to generate the list of commands to be run. This should ease the extensibility of bugtool itself in case...

fqdn: Fix notifyOnDNSMsg benchmark

2

The design of BenchmarkNotifyOnDNSMsg was flawed due to the usage of b.N as benchmark input size. b.N is used by the Go benchmarking framework to find a reliable timing for...

iptables: Do not set no-track rules with empty native routing CIDR

1

With the introduction of the iptables reconciler in https://github.com/cilium/cilium/pull/31372 we added a check for a nil `IPv4NativeRoutingCIDR` in the node structure: https://github.com/cilium/cilium/blob/598209ebb8135b591e0a73d4422f15edc4b2789d/pkg/datapath/iptables/reconciler.go#L64-L66 This prevented crashes like [this one](https://github.com/cilium/cilium/issues/32607) in v1.15....

[v1.13] iptables: Do not install NOTRACK rules if IPv4NativeRoutingCIDR is nil

4

In case IPv4NativeRoutingCIDR is left unspecified, the related config option will be nil. To avoid panicking, check for this case before converting the CIDR to a string. Moreover, do not...

[v1.15] iptables: Do not install NOTRACK rules if IPv4NativeRoutingCIDR is nil

2

In case IPv4NativeRoutingCIDR is left unspecified, the related config option will be nil. To avoid panicking, check for this case before converting the CIDR to a string. Moreover, do not...