-
Notifications
You must be signed in to change notification settings - Fork 3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
v1.9 backports 2021-10-28 #17728
v1.9 backports 2021-10-28 #17728
Conversation
[ upstream commit 54fdf6e ] This new method will be used in the following commit to check if tunneling is enabled from the node package. Signed-off-by: Paul Chaignon <paul@cilium.io> Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
[ upstream commit 7d58110 ] Before this commit, if IPsec is enabled, we add all remote node IP addresses to the ipcache of all nodes, regardless of whether enable-remote-node-identity is true or false. This commit reverts that behavior to only add those IP addresses if remote-node identities, node encryption, or encryption+tunneling are enabled. If encryption+native routing is enabled, we don't need to expose the remote node IP addresses via the ipcache. Signed-off-by: Paul Chaignon <paul@cilium.io> Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
[ upstream commit 2cea16f ] Wrap all the package dependencies in the Dockerfile. Signed-off-by: Aditi Ghag <aditi@cilium.io> Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
[ upstream commit 7db6998 ] Suppress warning message from helm: warning: skipped value for l7Proxy: Not a table. Signed-off-by: Chen Yaqi <chendotjs@gmail.com> Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
/test-backport-1.9 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
My PR looks good. Thanks!
infra issue in 1.17, rerunning |
test-1.17-5.4 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM for my commit. Thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
docs: Fix helm value when deploying pure ipvlan l3 mode #17708 -- docs: Fix helm value when deploying pure ipvlan l3 mode (@chendotjs)
Reviewed that PR as well 👍
GKE failure is a known issue (#17282), other tests are passing and it's been checked over by most of the original authors. Merging. |
Once this PR is merged, you can update the PR labels via:
or with
not included: #17470 @pchaigno