Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BPF] fix rendering ipv6 iptables rules #8943

Merged
merged 3 commits into from
Jun 26, 2024

Conversation

tomastigera
Copy link
Contributor

@tomastigera tomastigera commented Jun 26, 2024

Description

Related issues/PRs

Todos

  • Tests
  • Documentation
  • Release note

Release Note

ebpf: fixes missing iptables rules that would keep preexisting V6 connections working when switching to ebpf mode

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

  • docs-pr-required: This change requires a change to the documentation that has not been completed yet.
  • docs-completed: This change has all necessary documentation completed.
  • docs-not-required: This change has no user-facing impact and requires no docs.

Every PR needs one release-note-* label.

  • release-note-required: This PR has user-facing changes. Most PRs should have this label.
  • release-note-not-required: This PR has no user-facing changes.

Other optional labels:

  • cherry-pick-candidate: This PR should be cherry-picked to an earlier release. For bug fixes only.
  • needs-operator-pr: This PR is related to install and requires a corresponding change to the operator.

@tomastigera tomastigera requested a review from a team as a code owner June 26, 2024 13:53
@marvin-tigera marvin-tigera added this to the Calico v3.29.0 milestone Jun 26, 2024
@marvin-tigera marvin-tigera added release-note-required Change has user-facing impact (no matter how small) docs-pr-required Change is not yet documented labels Jun 26, 2024
Copy link
Contributor

@aaaaaaaalex aaaaaaaalex left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just one question above

@@ -462,6 +462,7 @@ func describeBPFTests(opts ...bpfTestOpt) bool {
felix.Exec("conntrack", "-L")
felix.Exec("calico-bpf", "policy", "dump", "cali8d1e69e5f89", "all", "--asm")
if testOpts.ipv6 {
felix.Exec("conntrack", "-L", "-f", "ipv6")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could this generate log spam?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

that is only when test crashes to dump diags

@tomastigera
Copy link
Contributor Author

unrelated flake

@tomastigera tomastigera merged commit 4759eb3 into projectcalico:master Jun 26, 2024
1 of 2 checks passed
@tomastigera tomastigera deleted the tomas-bpf-fv-test-fix branch June 26, 2024 16:52
@tomastigera tomastigera added docs-not-required Docs not required for this change and removed docs-pr-required Change is not yet documented labels Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs-not-required Docs not required for this change release-note-required Change has user-facing impact (no matter how small)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants