Girish Kalele
d3a1510e02
Fix kube-proxy logic to change iptables chains when ESIPP is turned on or off
2016-09-06 11:04:36 -07:00
Angus Salkeld
f785f3d3ef
Clean up IPTables caps i.e.: sed -i "s/Iptables/IPTables/g"
2016-08-29 10:34:42 +10:00
Kubernetes Submit Queue
ecf24101d3
Merge pull request #31485 from m1093782566/m109-proxy-fix-naming
...
Automatic merge from submit-queue
[kube-proxy] Fix naming errors and sentence breaking in pkg/proxy/healthcheck
<!-- Thanks for sending a pull request! Here are some tips for you:
1. If this is your first time, read our contributor guidelines https://github.com/kubernetes/kubernetes/blob/master/CONTRIBUTING.md and developer guide https://github.com/kubernetes/kubernetes/blob/master/docs/devel/development.md
2. If you want *faster* PR reviews, read how: https://github.com/kubernetes/kubernetes/blob/master/docs/devel/faster_reviews.md
3. Follow the instructions for writing a release note: https://github.com/kubernetes/kubernetes/blob/master/docs/devel/pull-requests.md#release-notes
-->
**What this PR does / why we need it**:
addresses #31484
@girishkalele
2016-08-26 01:53:24 -07:00
m1093782566
e16e5c4fec
fix naming error and sentence breaking in pkg/proxy/healthcheck
...
Change-Id: Iee36ff4e497052f473f95f8f0a92421d85e3c416
2016-08-26 10:39:56 +08:00
Kubernetes Submit Queue
189a870ec8
Merge pull request #30376 from justinsb/kubenet_mtu
...
Automatic merge from submit-queue
Add kubelet --network-plugin-mtu flag for MTU selection
* Add network-plugin-mtu option which lets us pass down a MTU to a network provider (currently processed by kubenet)
* Add a test, and thus make sysctl testable
2016-08-23 21:54:50 -07:00
Girish Kalele
b82c028f77
GCE Cloud provider changes for ESIPP
...
Add feature gate (ExternalTrafficLocalOnly) for alpha feature
2016-08-23 16:16:39 -07:00
Justin Santa Barbara
2c103af2b6
Create testable implementation of sysctl
...
This is so we can test kubenet Init, which calls sysctl
2016-08-23 01:42:37 -04:00
Minhan Xia
ec5699e451
clean up oldIptablesMasqueradeMark
2016-08-22 15:05:13 -07:00
Girish Kalele
282880f549
Code review changes
2016-08-20 19:49:30 -07:00
Girish Kalele
29188c68d5
Load Balancer Health Check responder library for ESIPP
2016-08-20 19:45:56 -07:00
Minhan Xia
392a92c9fa
change KUBE-XLB back to KUBE-FW
2016-08-18 10:19:59 -07:00
Minhan Xia
b31874fe82
bug fixes and nits
2016-08-18 10:19:59 -07:00
Minhan Xia
1acaa1db09
Revert "Revert "syncNetworkUtil in kubelet and fix loadbalancerSourceRange on GCE""
2016-08-18 10:19:48 -07:00
Daniel Smith
2aa0bb2dfc
Revert "syncNetworkUtil in kubelet and fix loadbalancerSourceRange on GCE"
2016-08-16 18:12:28 -07:00
Minhan Xia
643fc3803b
add firewall chain to filter request based on loadbalancer source range
2016-08-15 17:42:41 -07:00
Girish Kalele
5d6abf59ff
kube-proxy: Propagate hostname to iptables proxier
2016-08-09 10:05:29 -07:00
Lucas Käldström
c88a07ce1a
Run goimports
2016-08-02 15:12:39 +03:00
Michal Rostecki
59ca5986dd
Print/log pointers of structs with %#v instead of %+v
...
There are many places in k8s where %+v is used to format a pointer
to struct, which isn't working as expected.
Fixes #26591
2016-08-01 22:27:56 +02:00
Davanum Srinivas
2b0ed014b7
Use Go canonical import paths
...
Add canonical imports only in existing doc.go files.
https://golang.org/doc/go1.4#canonicalimports
Fixes #29014
2016-07-16 13:48:21 -04:00
k8s-merge-robot
04602bb9e5
Merge pull request #28655 from freehan/kubeproxyfix
...
Automatic merge from submit-queue
Don't delete affinity when endpoints are empty
closes : #25316
2016-07-08 11:28:43 -07:00
Minhan Xia
e1df5c8b30
fix proxy unit tests
2016-07-07 17:43:22 -07:00
k8s-merge-robot
3895cede49
Merge pull request #28434 from thockin/br-netfilter-warning
...
Automatic merge from submit-queue
Remove br_netfilter warning in kube-proxy
Many distros have this module linked in, generating a spurious error.
Fixes #23385
2016-07-07 10:27:20 -07:00
bin liu
426fdc431a
Merge branch 'master' into fix-typos
2016-07-04 11:20:47 +08:00
Tim Hockin
04d60ddab0
Remove br_netfilter warning in kube-proxy
...
Many distros have this module linked in, generating a spurious error.
2016-07-03 09:54:26 -07:00
Minhan Xia
51dcff40e6
Merge remote-tracking branch 'thockin/userspace-proxy-affinity-25314' into kubeproxyfix
2016-07-01 11:48:02 -07:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
bin liu
fd27cd47f7
fix some typos
...
Signed-off-by: bin liu <liubin0329@gmail.com>
2016-06-22 18:14:26 +08:00
Minhan Xia
6a3ad1d66d
add hostport support for kubenet
2016-05-22 22:18:58 -07:00
k8s-merge-robot
f9b8fd0c96
Merge pull request #25011 from zhouhaibing089/addclose
...
Automatic merge from submit-queue
followup to add http server close method
Fixes #25009 , a follow up of https://github.com/kubernetes/kubernetes/pull/24595 .
2016-05-09 22:32:02 -07:00
Tim Hockin
9052eddaf6
Don't delete affinity when endpoints are empty
...
This only affects the userspace kube-proxy.
2016-05-07 21:23:50 -07:00
zhouhaibing089
5923fd352e
followup to add http server close method
2016-05-05 12:04:41 +08:00
Gao Zheng
c75cb94be6
Squashed commit of the following:
...
commit 7bf1a05f61b78196c8d272e0d55980ba2254e81d
Author: gaozheng <gaozheng0123@163.com>
Date: Thu Apr 28 01:23:42 2016 +0000
fix gofmt
commit 54f6fa6ca76ee0fc5c4f8609fb2f875111ce2141
Author: Gao Zheng <gaozheng0123@163.com>
Date: Sat Apr 23 13:09:41 2016 +0000
reset session affinity if endpoint is unconnected
2016-05-03 01:36:32 +00:00
Clayton Coleman
fdb110c859
Fix the rest of the code
2016-04-29 17:12:10 -04:00
Minhan Xia
0d36dc7000
added test for revertPorts
2016-04-26 14:23:06 -07:00
Minhan Xia
56ad718008
only close new ports upon iptables-restore failure
2016-04-26 14:23:06 -07:00
goltermann
dddc6cb6c8
Fix a few spellings.
2016-04-21 15:16:42 -07:00
k8s-merge-robot
767fa6913d
Merge pull request #24118 from smarterclayton/proxy_args
...
Automatic merge from submit-queue
Allow Proxy to be initialized with store
2016-04-21 04:42:43 -07:00
goltermann
3fa6c6f6d9
Enable vet
2016-04-20 09:48:24 -07:00
CJ Cullen
760568796f
Masquerade traffic from off-cluster going through kube-proxy.
2016-04-19 21:39:34 -07:00
Minhan Xia
ad8c67723a
add test for udp connection flush
2016-04-18 14:58:08 -07:00
Minhan Xia
4fa6f3841a
fixing dead endpoint black hole udp traffic
2016-04-13 10:20:02 -07:00
Clayton Coleman
a5152a4005
Allow Proxy to be initialized with store
...
The proxy should be able to reuse a store on initialization.
Minor cleanup to make experimentation with the proxy easier.
2016-04-11 23:30:58 -04:00
Eric Paris
5e5a823294
Move blunderbuss assignees into tree
2016-03-02 20:46:32 -05:00
Dan Williams
6248939e11
Push responsibility for bridge-nf-call-iptables to kubelet network plugins
...
bridge-nf-call-iptables appears to only be relevant when the containers are
attached to a Linux bridge, which is usually the case with default Kubernetes
setups, docker, and flannel. That ensures that the container traffic is
actually subject to the iptables rules since it traverses a Linux bridge
and bridged traffic is only subject to iptables when bridge-nf-call-iptables=1.
But with other networking solutions (like openshift-sdn) that don't use Linux
bridges, bridge-nf-call-iptables may not be not relevant, because iptables is
invoked at other points not involving a Linux bridge.
The decision to set bridge-nf-call-iptables should be influenced by networking
plugins, so push the responsiblity out to them. If no network plugin is
specified, fall back to the existing bridge-nf-call-iptables=1 behavior.
2016-02-23 09:34:59 -06:00
k8s-merge-robot
b32078d89b
Merge pull request #20496 from matthewdupre/masquerade-config
...
Auto commit by PR queue bot
2016-02-08 10:49:20 -08:00
Matt Dupre
9925cddc11
Change iptables fwmark to use single configurable bit instead of whole mark space
2016-02-08 11:12:09 +00:00
Jan Chaloupka
4389b3f0d6
Rewritte util.* -> wait.* wherever reasonable
2016-02-07 12:02:20 +01:00
k8s-merge-robot
c26087db45
Merge pull request #19611 from thockin/proxy-sysctl-decouple
...
Auto commit by PR queue bot
2016-02-06 23:01:48 -08:00
k8s-merge-robot
0cc0bd342f
Merge pull request #20520 from thockin/iptables-test-nits
...
Auto commit by PR queue bot
2016-02-06 22:34:10 -08:00
Tim Hockin
1e7db4a174
Implement proper cleanup in iptables proxy
2016-02-07 02:42:18 +00:00