Timo Beckers
Timo Beckers
Hi @lubo-cruise, thanks for the issue. What was the tcp state you received? Interesting that a tcp state would be created without flags. Always happy to take a patch if...
Hi @smarterclayton This abstraction already exists in mdlayher/netlink as [`AttributeEncoder` and `AttributeDecoder`](https://godoc.org/github.com/mdlayher/netlink#AttributeDecoder). In `netfilter` and `conntrack`, I try to copy the interface of `netlink` (which in turn copies the stdlib)...
@srikartati `Flow.Zone` is implemented and taken into account when marshaling and unmarshaling. Could you elaborate on any missing feature or functionality?
Hi @srikartati, that makes sense, thanks. I've investigated if this is possible before, but the kernel doesn't seem to support filtering dumps based on zone ID. The `conntrack` tool seems...
> Just to be clear, although it must implement CNI config cleanup, it does not mean that we should do this. We still want to be sure that kubelet, or...
> .. or a sidecar pod that watches agent health and the CNI directory. This feels like overkill. Hosting this in the agent process sounds good. > Question: should it...
> Given that their presence does nothing without a CNI config file, it's safe to always install them and leave them be. IIRC there was a case where kubelet had...
@squeed It's not about what's in the CNI config, it's about what's in the Pod state. What happens when: - Cilium (and CNI config) is installed - Pod is scheduled...
@squeed True, that would be even better! Then maybe we could return an even clearer error message to be displayed in the Pod status.