mirrors/kube-router
1
0
Fork 0
mirror of https://github.com/cloudnativelabs/kube-router.git synced 2025-11-18 19:41:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(nsc): properly check hairpinning rule

Browse Source 
Previously, we would iterate over rulesFromNode, but then check it
against the entirety of the rulesNeeded hash. This resulted in the loop
breaking as soon as it found any matching rule from the host rather than
it breaking if it matched the rule that we were currently processing.
This commit is contained in:
Aaron U'Ren 2021-12-02 19:06:43 -06:00
parent 146786ad8a
commit 2ca39f14f8
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pkg/controllers/proxy/network_services_controller.go
View File

@ -1423,11 +1423,11 @@ func (nsc *NetworkServicesController) syncHairpinIptablesRules() error {
} }
// Apply the rules we need // Apply the rules we need
for _, ruleArgs := range rulesNeeded { for rule, ruleArgs := range rulesNeeded {
ruleExists := false ruleExists := false
for _, ruleFromNode := range rulesFromNode { for _, ruleFromNode := range rulesFromNode {
_, ruleExists = rulesNeeded[ruleFromNode] if rule == ruleFromNode {
if ruleExists { ruleExists = true
break break
} }
} }