Kristoffer Dalby ecaf56e0a0 integration: drop Force flag on docker network disconnect ...

Force-disconnect leaves stale routes in the container's network
namespace: libnetwork removes the host-side veth but the
namespace-internal route survives. The next ConnectNetwork on the
same network then fails with "cannot program address X/16 in sandbox
interface because it conflicts with existing route", and the route
never resolves on its own. Bounded retry around ConnectNetwork
exhausts MaxElapsedTime instead of recovering.

Without Force, libnetwork drains the namespace routes synchronously
during disconnect and ConnectNetwork sees a clean slate. Cable-pull
semantic is preserved: docker still tears down the endpoint at the
namespace level, leaving in-flight TCP half-open inside the
container's view, verified via paired probe-timeout pairs in HA
prober logs while both routers are physically disconnected.

Fixes #3234

2026-04-30 12:52:05 +01:00

..

build.go

cmd/hi: improve test cleanup to reduce CI disk usage (#2881)

2025-11-28 16:59:54 +01:00

config.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

execute.go

integration: make docker execute and ping timeouts CI-aware

2026-03-31 22:06:25 +02:00

logs.go

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

network_test.go

integration: retry transient docker network ops

2026-04-30 12:52:05 +01:00

network.go

integration: drop Force flag on docker network disconnect

2026-04-30 12:52:05 +01:00