Thomas Ferrandiz
b3dcaa0878
rename utilsnet import to netutils
2023-10-07 08:52:31 -05:00
Michal Rostecki
5d04a9fd97
netpol: Add dual-stack support
...
This change allows to define two cluster CIDRs for compatibility with
Kubernetes dual-stack, with an assumption that two CIDRs are usually
IPv4 and IPv6.
Signed-off-by: Michal Rostecki <vadorovsky@gmail.com>
2023-10-07 08:52:31 -05:00
Manuel Rüger
1d37130447
Fix linting
2022-10-17 11:37:07 -05:00
Aaron U'Ren
da5f8e0044
fix: address minor PR feedback and misspells
2021-09-11 16:20:07 -05:00
Aaron U'Ren
85f28411dc
feat(.golangci.yml): enable long lines linter and remediate
2021-09-11 16:20:07 -05:00
Aaron U'Ren
f52fddddee
feat(.golangci.yml): enable gocritic and remediate
2021-09-11 16:20:07 -05:00
Aaron U'Ren
d6ccc22519
feat(.golangci.yml): enable goconst and remediate
2021-09-11 16:20:07 -05:00
Aaron U'Ren
c5f4c00d63
feat(.golangci.yml): enable dupl and remediate
2021-09-11 16:20:07 -05:00
Ricardo Katz
21473edf05
Add support for kubernetes endport field ( #1080 )
2021-06-17 21:44:32 +05:30
Aaron U'Ren
13e0a39800
fix(NPC): check if pod is actionable
...
Check if the Pod is actionable before taking NetworkPolicy actions which
includes both adding KUBE-POD-FW and KUBE-NWPLCY chains for it.
Checks have now been consolidated to a single isNetPolActionable()
function which checks for pod phases that we don't want NetworkPolicy
for like: Failed, Completed, and Succeeded, missing pod IP addresses,
and pods with HostNetwork enabled.
fixes #1056
2021-06-01 10:42:42 -05:00
Aaron U'Ren
fa8d69edd8
fix: add locking around ipset invocations
2021-06-01 10:42:08 -05:00
Aaron U'Ren
96675e620b
fix: don't capitalize error messages
...
It is standard practice in Go to not capitalize error messages:
https://github.com/golang/go/wiki/CodeReviewComments#error-strings
2021-04-14 16:23:59 -05:00
Manuel Rüger
7d47aefe7d
Replace github.com/golang/glog with k8s.io/klog/v2
...
glog is effectively unmaintained and the kubernetes ecosystem is mainly
using its fork klog
Fixes : #1051
2021-04-11 13:16:03 -05:00
黄扬
f4b7d613c5
support egress to namedport without dst address ( #1037 )
2021-03-24 08:39:07 +05:30
Aaron U'Ren
187a3f23c5
fix(ipset): add type option to RefreshSet
2021-03-18 09:21:22 -05:00
Murali Reddy
afd866c0de
use ipset save and restore to modify ipset to reduce exec calls
2021-03-18 09:21:22 -05:00
Murali Reddy
888cac9193
use iptables-save and iptables-restore commands to consolidate
...
individual iptables command that are run during full network
policies sync
2021-03-18 09:21:22 -05:00
Murali Reddy
c145885354
resolving merge conflicts of PR-964
2021-01-04 17:33:31 +05:30
Murali Reddy
e16f2077dd
npc code restructuring ( #1007 )
2020-12-16 18:40:00 +05:30
