Tags

- b31b460cbc273d82d3debdf222b7898a3683a8a0 [release-v3.16] Pick up felixconfiguration updates (#398)

- 251a82e9f248b90748d7d9a34cea08d5da0fa133 BPF: Change data interface regex to avoid EKS workloads
- 08988ab301a5cc41508e8e4cadf9f75428b128e2 Add knobs to disable adding encap drop rules from workloads (#2484) (#2486)

- b94ba775bb62a748a00b78fc5a5547d991dc8348 Merge pull request #31 from neiljerram/fix-mock

- d26fe553d987b37fc2e759b63e93cb1e7294313b Update pins

- ae7d462fa8f4d03406cfa6f5ad23d3fa564763da Update pins

- 79b2bcd1f91020093a10d997a758d8650b7cfd5f Update pins - pick up FelixConfiguration (#2172)
- 5bbf9a228b9aef8a5fe0692037d867f9e77031ff Add KubeControllersConfiguration to the datastore migration (#2175)

- fc9bb56bc6017a4252a8eff206d71b11a79156c5 Update pins

- 0d154c5ee13042898b9d7a7cc34881b336c49e04 Pick up felixconfiguration updates (#399)

- 90fa8f4155041cf0fcbb081d056dd9e78b1024e1 Add knobs to disable adding encap drop rules from workloads (#2484) (#2487)

- ddf4f525c1537bfdc2dae39b255621caa0af6943 use projectcalico.org/namespace mesos label as namespace
- af17ff65e6490e4a3a10afa120b204804f668de0 Semaphore Automatic Update
- d87279d811f8d16890e3bd0fbcf85b01b5491625 Semaphore Automatic Update
- b1d00e718b74f76d81954bdf3a91a3d3ab3e408a Semaphore Automatic Update
- ff38c775ed0b4b25b050bc905e526fcefcd8832e Run current version of goimports.
- 30ea31573030f5fe55b53c46063ab30777faa1ab Disable DAD on IPv6 interfaces.
- d5fb8864a1ca05eae2f571594a9637835e9b443e Add test for disabling DAD.
- 06b68b70ba918e423b2b8e9cc4dd3956e5fc0584 Markups.
- 34c1ca6b2e384a2fd06be2314095464b0ced56b2 Semaphore Automatic Update
- 089683e7e717563847f62af78a5dbfed5428dd9b Semaphore Automatic Update
- 1955fe28a9a45b71f433bbc585a30a5e6888dc43 Semaphore Automatic Update
- 6d778763da9f4ac53e8c57e0a02452d453080e18 Move to scratch.
- 2c5155ce1ad65d2a112a311cabf57b693ef8f9e6 Check if cni json is valid
- 212b84b61e73dd2a64da0524a42be33e04cb31eb Handle panics gracefully
- 520767ac296816c1720268650b333ef3686981b4 Reintroduce CMD in Dockerfile
- d5e3723edea5e4e6b425e4a8dc39ee632c9a4ac7 Use relative path
- 0e93646547c0965a94c6b24a1b39cc11dc6c1e38 Upgrade to Golang 1.14
- 0836d1c73dc9a0cfa33b70e0be27643879f05ada Added Calico for Windows support.
- 4669c6f9bdc7e064f9db2b254318f3dedcdb61c4 Refactor functions for windows dataplane and fix winfv
- 5f7097b5d144849e275496678d67e155c6d2dd69 Remove flag windows_disable_host_subnet_nat_exclusion
- e6ed205096cd65d57f94d9ddc4299dc85bdd292d Fix
- b493a3e094d8a7fdac6de60089c8cf9bb60e04fa Add configurable logging to a file
- ef7faa4386cf2c123e3883ee612de5032d2a2231 Use a separate library for logfile rotation
- 5f831b935e6702626dd8acc37a41fa5de4e3c6a7 create file for specifying permissions
- 3631762bd76f0f7245cb7837b2f847f273c0e4b1 Set extra logs to debug
- 74298fdb6d60e3255a89e272b6b5e78247acb7db set the default log level to info
- 25bfb0a38a0e40a405fe8d0676e918f336ddd336 Add configuration for log rotation parameters
- 8316e7174baf17e61e52209df506bf61cce68ca9 fix tests
- c95c69923a8ca7da34818a2e746047e41a7d26d5 Merge pull request #929 from fasaxc/zero-annotations
- 81ddf680b8f9a17b2e773c2db7ec06d0d1cb8c9a Merge pull request #931 from song-jiang/song-fix-bin
- b21a70baf7fb525f7095685c0cdadd57fc501ae6 Pin libcalico-go bak to release-v3.16.
- 9c0561b34425b3f0306c4bdd35d67108fc2114c5 Update pins (#937)
- cf3e2e79e30b9f796900ff9fcb254b1d20ad7afd Fix release build (#938)
- 5389d4a80233a01fa2507ab3bc058a7259bdad18 Fix that CNI plugin itself was only being included if make ut was run (#939)

- ed0e9b90783e5b275bf15aaaa997f47cd99f1632 Merge pull request #31 from neiljerram/fix-mock

- 549daf8fa347b3b9b540f1b7182258ca580c6268 Properly handle disabled autodetection
- 2b9f86ed32d30bf60ab2e852218a5c4cc643f015 Semaphore Automatic Update
- 1159cc0f6e114a06172e8eebeb7f820d03a84011 Semaphore Automatic Update
- 3483165064db88baf9a5d33c77c20b256bf616ab Semaphore Automatic Update
- 7dfe5d4b6fd34625d01a46b5ce41f83fb32fdaa0 Semaphore Automatic Update
- 6567df5329f9452c516f753e08ab10c4062639cd Update libcalico-go pin
- c1efa0184f085a61d33a579c7340eb3db9f4a4c0 Semaphore Automatic Update
- 7ed0eda39277bc13397621bf11477b2826963443 Use log.Infof for disabled autodetection
- 355d597e9bffd72a93546c078646d13712d85b11 Semaphore Automatic Update
- f7d462bac4cb2a945e0bc72ac6f3db8384d9f87e Semaphore Automatic Update
- b2a53b263179c88b173f6a18732332ff8f80ba36 Semaphore Automatic Update
- 5e1cc3cd31f23f57ac0db6dca7dbae3d149a3feb Semaphore Automatic Update
- 36abd27154d4d72ccf11b345ffd431d724fd9e1b Attempt to clean up as many base image files as possible
- 351e7272833f19c81474afbf6228cd3b952739fc Semaphore Automatic Update
- d26adea0d8cb99ed18ab362709dacd24a54de82d Semaphore Automatic Update
- 8283a25ea5d53e3b4134f5da8840533682d61c58 Semaphore Automatic Update
- 44ca0c3c1a371b34e966d18c8a89f4df8a80679f Include setup in the keep-list of packages.
- 15344f67dc576a60ae4be4cf5ec598a4294fce80 Semaphore Automatic Update
- 0e123cece2ce46daf3084c91f9777965805e45ef Semaphore Automatic Update
- 63c7e0fc409da98c8bba9594d3120063817ae0e1 Semaphore Automatic Update
- 62ad11591ae4c90ff5431319cf9add083cd618df Semaphore Automatic Update
- d5b4645be0e64790db9dba6c73c3562a0de1f3fd Semaphore Automatic Update
- d0ddcc69207c4292ffc34392892221a2327b3481 Semaphore Automatic Update
- 5916ad21ab0a85677e923f4ae63683e186edc347 Semaphore Automatic Update
- 3808a64f075529064cbb3d0c362feb2d87bc3894 Semaphore Automatic Update
- 6ac2838370c76e09403c4e15f2835fc87f3196ea Semaphore Automatic Update
- b68b65a9800547041a9b72def8bb2f55295fb740 Use calicoctl-wait instead of now non-existent shell, in calicoctl image
- 585127e5e1d11fbf781528937e3062586413f78f Always auto-detect node IP address
- e9e51af477e10220ab31e6a6eaed2e58cef89f1f Semaphore Automatic Update
- 1d9c7637da886f277d7e96e4f94d0461d9a0eeab Update cni-plugin command.
- 2632b042f816ffc8298f315a03d034dbfc5d9a2e Semaphore Automatic Update
- 3ca1969c4761ca5c704136e3364f4e44125f55a0 Semaphore Automatic Update
- 9a591f8dee678fe6d9d0d48fba1e689e9a4856b4 Semaphore Automatic Update
- 07f4d4d39078d3a349f9d94a5cede5aae48d8e15 Update go-build version to v0.45
- 8cd3c8edbaf4186bec957ee4a36f3cefe923b6c4 Upgrade to Golang 1.14
- d4db0c72de8fb543ec2fbc7d5fafcf2d0febcead Introduce detection method cidr (#518)
- 0d9c72d2f4ae85ca1278fc6185b28634d593753c Fix outdate gomod/sum (#539)
- 033536361dbd26877b1de271339a6d2286c00913 Semaphore Automatic Update
- 55490d401b0a6360891df19499404dc9967d68c3 Semaphore Automatic Update
- 5827422b90aa7ecec8421a000b73ab99ba3cfd91 Remove vendor dir if it exists on clean
- 0b0fa3b2f84ee455f90dd612ecc16537c9d22ca1 Semaphore Automatic Update
- 43d0961d1065026575d84ee04311bf747ffe7af3 Semaphore Automatic Update
- 786567fb8c18d62d4cf542803f93cf617fffb926 Semaphore Automatic Update
- e4c1b7b0395553c89283b8e32dff44125d8d73f9 Semaphore Automatic Update
- 7c3f01999193067301ec05ffaaa1c05d0e4b111c Don't fail if not authorized to access configmaps (#541)
- 9285e6eac8e5b4e1394b36979c7d0eeacf725d0e Semaphore Automatic Update
- 1cf3250de8abcf5a6da9d22b4bd934c840b4fffe Semaphore Automatic Update
- 16f743c30ecd1c1588585890c63e6e7d8e5e10ca Update to latest BIRD code, to avoid needing -s
- 1f1354a5f7fdf95d2d0eebc67ef5e5a9c497f8d6 Added Windows packaging
- 0dee01c8939b3efc61551147bc056a0cfd6a1499 Fix issue when remote-deps generated twice (#529)
- 0cabccda4a5bf6bc346032a1daf5fd5a6c771dd0 Semaphore Automatic Update
- 2ab3dfd39784062a3cf8a14355e09ed322cadc47 Semaphore Automatic Update
- f26de9a94ee0fd3bcfb4a36bc0f1718217bc12f5 Update pins to pick up BPF fixes.
- 3c8e7195185801e353cf09ace927dd7a214b63f3 Rev felix to pick up BPF fixes.
- aa14288be405c57c6351db73ef1ae3f66f507279 Rev felix pin to pick up backports.
- d73c2af6cf2c9d342cc30933fe981b5427dcbb31 Update felix pin for picking up windows fix.
- 9137c0802b7ffc0dd042847902f1b419b854bd1c Cherry-picking #549 from master for monitoring node IP addresses (#554)
- e61fbf80cfa4e41866ce7b136190aefc7693e04a Added windows release process (#556)
- 8590533f4685d2bc59482b3cd4dcb5a6d05e366e cherry-pick #559 from master
- 847a9ac601f62df359c76945a531a7cbe31dad49 Update pins (#561)
- 4c4d2d1f453ae8cf369dd4d938be9925a451226d Update felix pin (#562)

- 3dd6c8d9a1111d8f881839e8f64b706468c0b955 CVEs
- f450c4f41b8149358420e936170f5e17b1125b9d Upgrade to Golang 1.14

- 55d5f8a13b692bc649980136ccb6dfff0fc2313c Update libcalico-go pin
- 821515b4a26ca7f624c221bedfb4899562a63f02 Update pins (#142)
- 74bb46a0aea9ae05e33408e902f3c7a297584602 Update pins (#143)

- c0bfa8b00bbc47868a1dfd388653ad37524caf3d Semaphore Automatic Update
- d5b47e261e7d64268e1908ac47adf797b87d6ead Fix the help text for the datastore command (#2139)
- 0d8121ce020b765529017aa03872413d9bab340f Semaphore Automatic Update
- 8cc752e37d9b09ac4c0308b2bae3bca456f69f28 Fix bug that prevented importing data when a K8s network policy was present (#2141)
- 0e5dec1a84276a232f8077070ac5d9ac21ea4e82 Handle case where a node does not reference a valid K8s node (#2143)
- 536af43f1ed033047b1a06c6c3186088d57b2520 Semaphore Automatic Update
- b2b0e0468ef86712a8a0f3b788079170dd8b7fa0 Semaphore Automatic Update
- 7603636de95e4841a7f4540e5bdda5b01b82be22 Fix CVEs, use scratch based Image
- 078263e87e4cf576105ca559cc4bdf684b6e1c0a Semaphore Automatic Update
- cd41cf3df252245908b1d88cdd294e545014bed5 pin-updates (#2153)
- bfa614ce27ca91e27886e87e3175987123afb01c pin-updates libcalico-go (#2154)
- 5d223d2154bd87d1c9007c4d0cdf245cfd669751 Semaphore Automatic Update
- 4f7bf21739a207f6e8b4e886355dfa0169c8adc4 Upgrade to Golang 1.14
- b43b77a5b466402f996adf5b373798ac907b239d Remove vendor dir if it exists on clean
- 86d6d433ddc1b9ae54fab632a9dec6c15375687a Semaphore Automatic Update
- be8e308381fc548265d4de663986dfd6ac04ed36 Semaphore Automatic Update
- 289483f8f2667b3f5e40f10e83dcd34548fc59bf Semaphore Automatic Update
- 087cfbe3ec9bd38312b2424f1191644184468e9f CRD import fixes (#2160)
- fb5317f6d3e7aef6f7420d5262b666f327f506f8 Add ability to load directory
- dcb1f4f3fdb3166ce3c24184cadce9004adc4511 Semaphore Automatic Update
- 48addc63cbd252f256aa6f874e85e724f3198147 Add --skip-empty option
- 770c804d8c823c535dd77ff533293e18974e7ba7 Semaphore Automatic Update
- 346a4087e3377d296361e1baca8a98bf04845a6e Update pins (#2164)
- 5a3703431b3e8e7a7fd55f07e1784b7a6478b7a2 Update pins (#2165)
- 741a6ee0be285f65086486eb9c11245243465c10 Fix the default value of the K8s client QPS (#2167)

- b1ceb855e71ffd89ef875dc466890a32ae010275 Semaphore Automatic Update
- 71a867248b6214a5a0ac7068ddbc8c9aac056f50 Semaphore Automatic Update
- 8e8fb641445d53101c6b7ea166a5236b1508b413 Semaphore Automatic Update
- d04565b86048a55bd30840a82003aaa320f43c50 Semaphore Automatic Update
- d77b89fc01558de5a48007ec51b1125ec62a151c Semaphore Automatic Update
- 8328f97049661eed05b8d5a65c45f75c77586fa8 Semaphore Automatic Update
- 70e3e952afc79db173414a1f7c32df9f7f087919 Semaphore Automatic Update
- 65160013cad6f8042e02923c0d66bd3ff0f32575 Semaphore Automatic Update
- df2f4410b819d9742d107f6d6b05526259139449 Semaphore Automatic Update
- c465f4288717bfc1ae7265a5b02316c6b0cac5a8 Semaphore Automatic Update
- 856d399cf4b8bb30edd58f3f7b866d647790c162 Semaphore Automatic Update
- e2ec271c7cab83aac2597a405f8a828ff5f00df9 Semaphore Automatic Update
- f4f1f78f25283b3969730b74df45aec7e70ed310 Semaphore Automatic Update
- a8e9d57642b6aab25fa1a4cb3ea42522583a6def Semaphore Automatic Update
- b9ae0ce1594d46d433fff217a068e55f53e48690 Semaphore Automatic Update
- 12bcebf851690253d750cd1a7b79d76d821cbc74 Semaphore Automatic Update
- ec95af0eeaa029c21c591fab95bf47d20d03468a Semaphore Automatic Update
- aa3c057096a8b021782c1930fb5c4c5f66d0f40f Semaphore Automatic Update
- 030d3919c50a15eec95244269cdb37d7154f39a8 Semaphore Automatic Update
- ebaf5e04a30325579578863e1fbf10e4095b6244 Semaphore Automatic Update
- 5603933ea3156539c5fb67a05af552b861808c0f Semaphore Automatic Update
- 193ed3d938a86a6bea342c82458e2dbf0c3ee9e0 Semaphore Automatic Update
- eb716dc274a61ba567400180783e315e0a1d38b0 Semaphore Automatic Update
- eba5b8a2d74b305a6d1999a4c57e42b6311b24f7 Semaphore Automatic Update
- 836e8f99c2649d9f3444ca636e99f7b87279f828 Semaphore Automatic Update
- 0965f7f6ec697d7b16435952887da7f99e904095 Semaphore Automatic Update
- d6c10bab0413a2c75374faf332f0b1c3e8350642 Update to go-build v0.45
- 4eabfa2106e02f430ee32e0f043c755bdd5683b7 Upgrade to golang 1.14
- 49e87d2592cf45e3c5c95172abcc739124b9a632 Remove vendor dir if it exists on clean
- 62713429e6086a1fa5a0aae81d9c8f32faafb403 Semaphore Automatic Update
- a032bc45d8edf1b0b885a570d65003acf5750743 Semaphore Automatic Update
- d07907760131082deb04fff6a02a115d1aaece23 Semaphore Automatic Update
- 30b522b49fa0a5d6a7250ca0088520491564df52 Semaphore Automatic Update
- a7e90eef35c9712b8ce6424b3f7c24b484d5b409 Semaphore Automatic Update
- 5c628a2e53f1e95a0a08d0e41e5f4cf162cf1ffe Semaphore Automatic Update
- 62e2545e2494608e2ae8ff2f9c0ad8b1c4923ee9 Semaphore Automatic Update
- bbb7410d9c4a9b0e63ae846b10bc5d77f999398f Semaphore Automatic Update
- 7dc813e3364057c7f7e4c683eaaf8607d88831aa Update pins
- 32b9418266b826903525b8c7c53d2d5e15f2b6b1 Update pins

- 2701a071aa71146c3c9b2537c78b35811f6d3f01 Semaphore Automatic Update
- 4a79532fcecff4d8eafbdc181672582ac8ad5869 Semaphore Automatic Update
- 2ae32ba2de940acbd9849b079513712147f453d8 Changes to support an additional typha client (IP allocator)
- 8be068576bc6edbf5c081cc4b92e1e72c4551d1f Semaphore Automatic Update
- 524b784b901786d1052a9dfa71836e61aa697a87 Semaphore Automatic Update
- 80bf3037ffe13ca3c145398c6057f51853294b00 Semaphore Automatic Update
- f6c081eb911ccea888de8091745e52e8b4100dab pin-update
- 153f9fb84e64ec08c56026fbf1eb1eff8c976ce4 libcalico-go pin updates
- 10d475888b17ce16badc45500668708e917feb7d Golang 1.14 upgrade
- 2d54add7c9ba7d32b3c0f590533f9552a127acc3 Remove vendor dir if it exists on clean
- db7cddd6da58d050d44e926a59eccddefbf2163e Semaphore Automatic Update
- 7a2a838e99449b3ef479e313f9773eb26b8410ba Semaphore Automatic Update
- 32dfe0e092a8cd7b8e29f9519bdfe188c75c8e8f Semaphore Automatic Update
- ebd7ec100f42b82fb7043ad316c0eba58d2af16b Semaphore Automatic Update
- 928347a3fb826e13aa7581ae398a63b8bfa7373b Semaphore Automatic Update
- ea38d3d257eb363f7fc52a8040a02de14f01e937 Rev libcalico-go to pick up BPF fixes.
- ff1a0241fb55bfae858f0a8b7420826a669e7f69 Update pins (#393)
- b9dae7bb80bd1d1d7e0dc2b842c56ee240f6bbbb Log out Kubernetes connection parameters for easier debugging.
- 3c3aa6d8c30d22aee4bb1b2aa3cdefbd99a66857 Update pins (#396)

- 1f85a162d986b1bfe8bb363679192f03af152a19 Changes to send ICMP port unreachable if there is a service without backend 1) Modified the ICMP replies to a new BPF section 2) When there is no NAT backend, send a port unreachable similar to    kube-proxy
- abb430a8c4ab18532d12187664e89d5ba727a9fc UT cases for ICMP port unreachable
- b803537c62b977f58b91141f131278f39071f353 Alignment changes
- 018a99712ab54eb901b4af4ffcbee9d3c05842df Alignment changes
- 94bc53dd0275fab322de05328bcd0272d194cd2e Code reorganization
- deecd641c2926046ef12981dd8c15d3a3d7652e9 bpf: Map.Iter() uses bpf.GetMapNextKey syscall
- d4a0eac6019dc767ec154fee588e8d1d672a4d26 bpf_route_mgr needs to call ensureDataplaneInitialised() earlier
- 6b392382227eb270cf695ffa5f09daa1dd50674e bpf: LivenessScanner only deletes the current key
- d8fbce081df363c9454c5e5e4c52670f019a6f4d bpf: bpf.Map.Open() opens map without creating it
- 781f6832b71dca55bd515c22b95483abd9904f07 Adding more WireGuard FVs (#2362)
- c30baf53ec96011de2a7ec5df5a25c328d3c0d0b Semaphore Automatic Update
- a8e21861e9ecda7de0aa5e6c41ba81c992b5b201 Added a new FV test to verify icmp port unreachable
- a891eaa062637a862f3723223211f0c1bc1d2674 Fix flake in config FV test.
- e96a90b96c52f9c0524d4220758ee56c5129c683 Make race detector optional.  Enable by default.
- fc70e02179a44e01cc7e0358afc071bc5ec91086 Free up space on the build machine as recommended by Semaphore support.
- f14d58bc7cb4abc3b1cbea9efb9b57f0156ce636 bpf: update a comment in conntrack cleaner
- 726f58dca35784f859fc85eef02c2ba0b23508d9 fv: AutoHEPsEnabled mimics AutoHEPs in fv infra
- 7569e6f79a141776db2aaea170fc9e6e00911e28 Semaphore Automatic Update
- 8c7335946db7cad9d979019235a15abdea09fbda Changes to FV test to test for error message(connection refused) when trying to make a connection to service without backend.
- d77dd146d14ec5164d16bd4e3011ef725c9fc4b7 Keep qdisc between program updates.
- 134fc2065fbd434af82f2275ddc6075d2164613d Fix up UTs.
- 37175de8ec8f1ac7c70deb2cc3ff5f6a7d360229 sending error as a response from test-connection
- b3798eb842d1ab5afae01c8fbcfd32b1e160d198 bpf/proxy: ServicePort deep equal
- f9863a58c2e72909b74834dc7d5fa664e7d1eca8 Minor changes to fv tests
- 6ada537c9975ffae5d5b951aef32bc0447722367 bpf/proxy: calculate active endpoints for conntrack cleaning
- 4428d7fa2363694d6f626ad4d9f171c3965a05d2 bpf: functions for creating various conntrack values
- 3132d80a5e3cb140794b790d007807c390eadc58 bpf/proxy/tests: _ vars into camel
- b28407ed11edc0d5faa69a0c468a5cdd8af467fb bpf/proxy: nat.BlackHoleCount is uint32
- 657d18f0033fec04a698def6c01877575f0dc3b6 bpf/proxy: syncer cleans up conntrack
- a923e747b01cefba7b1ec1036f9286067411aa92 bpf/fv: test nodeport connectivity from host networked pods
- 8c84d56450488eab11bc030d363c8f9808386701 bpf: generic conntrack Scanner
- 9bc613adac4e358f45317341b9bf1d2334444ae7 bpf: move conntrack cleaning from proxy to conntrack pkg
- c4c437c956e596d86d015e24e4c8df558a195dc3 Semaphore Automatic Update
- 143a15806198a2607d92ca80c5eaeeb017db0c68 Review comments on FV tests
- e46e19287356a0e045424fbdcfad885b0328be0b Added ExpectNoConnectivity method
- e3a1788eccb05e87362b1110e3040ab0c74ce016 Update policy program without replacing whole program.
- f696cf0310eb74877f96d1e81d81d81d84802ce7 Markups.
- 9f23b45ec71dd39e6caa5586bd4905972863e630 Fix collision of ingress/egress FDs.
- 3390b967bbc49cfd6eb62c100c4283579e54afaa Markups.
- a54de01f10ef74e865a17ada22d15cc82e68dfe7 bpf: conntrack cleaning only in kube-proxy
- 19f0aaa501bfc8cd9f857e50e990e5a48e5990f9 bpf/proxy: Avoid  mangling []string by sort in ServicePortEqual
- cb156b1b74693199ac202dc2eac0a78a09b9a773 bpf/conntrack: typos and minor fixes
- a48a8bdc245b9d9273e9b3373ce2c582bf196a01 Fix up formatting and make sure protobuf file gets formatted.
- 1e9421301d80a14c4d537938096e557325468378 Markups.
- 4cd77b3374344c567c189de507bf1ae1b052e63d fv: ExpectConnectivity takes ports as an option
- 5c63e4eabb2737fe7986db313b9eafe43ff95615 fv: ExpectConnectivity is a universal expectation
- d265d41fc48492fa7eec836ed8b09b8127a5f7b5 Remove FORCE_WIREGUARD_FV
- d2373d59e6423cb6151072331c143d5b4ac69eae Update semaphore job name
- 896994f8ae452029f48c486c42f1939b544836bb Fix typo
- 4cc28d72e24b36ea4892e30d5876cbe9c575c838 bpf/proxy: remove StaleUDPSvcs from state
- 96e9f5ac9bcd3819848ecfcbc88994f76fb6c06f bpf/proxy: checkState checks "eventually"
- 7c8777e3e75287142701888202b9c0ab9954347a Make --random-fully configurable for MASQUERADE
- bdb508c9b99d3f2deede68ba08a76cd52d030ec6 New FV tests to test service type changes
- a9f5dfdf7928afd476d6cc900e6a046b84816244 Remove compiler logic that is now unused
- 20ede0f81f730509cf1bd4c5e2fa662d77f3a65d Updated fv tests
- bd61e0886a953eff0fdd9f855c45b98e3e285a9c Add BPF dataplane support for Wireguard
- d4c9592a26a457c26f0dd32334075690d0d19b57 bpf: reduced allocations in map related syscalls
- 85d3b11338dc809192e067a4c9f48e992cad2bb2 FeatureDetectOverrides structure added
- cb4d1e601c66179177aad5322d304d02af9e10d8 Handle FeatureDetectOverride and added some unit-tests
- 7bb5fe7aaa542f90ba838acbbcc744b95262e94d FV: Print container log lines without additional log header
- 128ec5978616d421fb22bd5cf9a9071a849799a0 UT for service type changes
- 3666b14aafa8cf766bd876b2be009467d9840ffe Error handling when updating service
- 331f8e45d662aaa24ba51624f53151eb2755e852 Add a IptablesFeatureDetectOverride config parameter
- fdb823b7d05aad3ebd7bb07a059708cf15f410c1 Clean up of UT
- 13648450709f2d974e978844321ab63657b26565 Param IptablesFeatureDetectOerride -> FeatureDetectOerride
- ea6e48c67255fade9562cebcdf089508f7e03c1d Revert "Make --random-fully configurable for MASQUERADE"
- c7ff860ee30510bb6de43319e17a9302243a7fed Removed the feature-override pre-check
- 5ff9d1d55678f43c4993d025cd3f3766fe113816 bpf/proxy: syncer startup benchmark
- 914c69d43d1b8d03aceab769bdfd27e6968f5fd7 bpf/proxy: pushing startup resync from O(n^2) towards O(n)
- 48569633428cb3db7d24c42feb822147c3453555 benchamark build tag
- ee2def1203d4a80f4d6848bab2cace002314a992 bpf/proxy: add some startupSync() related comments
- 1e90aec9aaf94c9e1df65b0a6ded4f95d3288c30 bpf/proxy: rename vars in matchBpfSvc() for clarity
- 761287278c52619b48463f5f753a22b2aa5d15ee bpf/proxy: startupBuildPrev preallocs eps arrays
- 7cf318a20233125373f839e25a68e2db0e5574d8 fv: dumpNATmaps executes in parallel
- 2692b086cedc3fb0cbf133ff03a6edda20c2ed64 Adding support to detect RHEL with kernel version 4.18.0
- 7181db6287c1b0c7c0c6f5c99aaaa5f607ee3bf8 Removing unused variable
- f3b109547aec87be5db4ad786579a80f4add8ec3 Run the FV tests for TCP as this test is not impacted by the protocol
- 1e60fc19ba0b285eff4c8215d8433966d2ab185b Code restructuring and some UT
- 46016981656e07f4daf4594d6692cc1a82e72bd5 Allow tc to run in parallel again.
- 9254a43e84ae73cedae3b84c840b2bac27896685 Quieten skipped tests.
- b67c21e96ed3c5b99bcd94889943b5ca45f24bc4 Fix race to upadte ifaces map.
- 4f968f64d3467c80daf5f6bdc429affe27983b80 Instrument FV cleanup.
- 1385b0c6b31e1de2e44d7ff613978a166fccd8ef Try k8s cleanup in parallel.
- bdefdb564bc45efea5dc5af64285e3151cc6a363 Tweak API server/controller manager flags.
- 68ab2e425b40aa139a33d0f1473b1d33aafe556b Increase QPS for test's clients.
- e9d40663dfc3082ffa1c609b55367752dedc4e3d Handle cluster role being auto-created.
- b028a96214760f236a9939e41c593bb54d5741e0 Start felix nodes in parallel.
- 33d1b70d36e91b7f9e464721d265301cf4b26e12 Improve diabs when a command fails.
- b1130149987499b5c3acd09ab5748ab007bb3828 Markups.
- 4743b601c383f4c121da6308d7427e47d5707ad9 Added support to compare version strings with a suffix
- bbb8ea1db3926e2deb51bd3925e9f1f812fdbe39 Add FV tests for WireGuard host to workload
- 31b3fb64f2c624ce121b8449160300fc18d5ec9f Review markups
- c250a103617e473d7a7e5fc6a8c704c7c817b67f Add a KeyValue list parse function
- 98ee41973e8a8b5f46ceb7646d6a5dbb6d921a21 Replace the FeatureDetectOverrides scruct with a map[string]string
- 5e6bb2773fbff4469841c66b162dd13f7778c77e make fix
- 641f2df51aa89a0f7b4a0cdcb85dfa4209bca25e Add benchmarks for named port index.
- ab6b8e791afbe5e2940844f0aab88a9cf49f2441 Accept empty items, e.g tailing ","
- 111f5b7793d15f19a704c9261b724f5c125694f1 Added a KeyValueListParam type with validation
- a8d96b81035a3b0c07b999bd81ebf0ce998af945 Switch from Skip to conditional test definitions.
- e26823422446f806d339e76b61251f6fd2db0745 Removing hasi-corp library and using our own Versionparse library
- 0dc7a78d2832421e673851ecb313e023dc085d52 Changes to remove hashi-corp library
- e56842889f6f90ab8cbf09a89fbbfb618163e06a Remove unnecessary pointer to map[string]string
- d5cd2b356d0bbe9c994086faf02eb4ce9bb02ac1 Allow empty values
- 04c4c54dc03011c4e183d9abb27c96d87af269b3 Back out parallel cleanup.
- 6042e5630041f0c9e05cf33599de0c097ad98b8d Run a stripe of BPF tests with Wireguard as well
- 5b367068c5347e6512de723318d417d01e5eb278 Fix IPAM -> BGP typo/misunderstanding
- e6ffc32f3165ea67d35bae2dfe8bdc549cdc7c90 Addressed review comments
- 1b1a084b296a7858311e69da532a855f69448f6d Move regex parse outside the function
- d7b95bc42a2850953f7656c90b64cb3d215e830f Integrate Wireguard FVs into main FV runs, including BPF
- 5c35c741665b15f373c4f987722da63adda6a8cd Restore running Wireguard FV tests without BPF
- 640b6bf1633b5b5f07f597cff29a5714bbf51192 Check that Wireguard is NOT available on the normal Semaphore VM
- 4a25224a5833a8f6a370ed708fb2deb4144614c2 Review markup: comment for wireguard check
- a6a6ad4405a281dd429bd9a4733c745b9a402b7f Corrected issues found by "make static-checks"
- 7bebfec4e98e3d347b3ac1f401e06fe0a82570dd Simplify FIB lookup logic.
- 33dbb55d26d88714f39c3c1750b8aae84b36d815 Support for appending and inserting chains in iptables dataplane
- 93aaaf43c4bec73e9297c062f0f92d883233632a Markups.
- 1c0b834cf0a0c2f7388a2cd4005012cfafd46fde Add more jobs to new-kernel FVs and reduce normal FVs.
- d1fa4fa264ca36b679df6e57f7d8fd339e0b12de Squash spammy wireguard log.
- 51f015abc91173785be130923e20d599bfb10293 Removed the "local" flag for FeatureDetectOverride
- 5f2a3c9162cd47792aaa17db0da63bf1d3fa0602 Updated go.mod, go.sum
- 9df492d7b0b250de1f90b915eb883cf930a99078 Move policy acceptance to end of the filter table forward chain
- 8cb997567d9aa0a19d541c4429d4289f63ee5927 Semaphore Automatic Update
- 47bc54bebc69667400f19c6ba4402323a8dc5de2 Add AWS source-destination-check handling (#2381)
- 540c4562377ea1387c50562894f5e991fdb08940 Semaphore Automatic Update
- 32d96f9384bcdfb4e2a3cd6351f96cb0c81eb105 Rename time shim; avoid name clash with real time package.
- aac1aaabb122bb384190a595462b89dc4bb52e40 Rename netlink shim to avoid name clashes.
- 59058085f2b88f3cb582c8925421b695b5a365d1 Markups
- c728a728ee4480487986e4820bfa3dc1c541d806 Rate-limit jump map cleanups.
- c006b9154d14b8a6dda050d44523fddf5fe1e461 Add FV for jump map cleanup.
- 192450d259b133a4bb217b90438c963a231d53f6 Markups
- d959a121144d5076841c9a12e7de5aaad098e40f Only enable verifier log for post-failure retry
- b8309ff76f512249c673283d1a8051d9c9e80234 Update Dockerfile.s390x
- 51bfa0e418b596133d200db219c3d06b4e114f67 Markups.
- e52916cfb8200c9acec2a2f03bc95d3fc4f758f3 Add  (currently failing) FV test for pre-datastore connectivity.
- 1046210300cc8fbabe4204207ead740aa8220818 Add constants for mark bits.
- 90d71be324fd53df638b71eb6769a66b3ff484cc Adjust mark bits to give clean seen/bypass bits.
- 50e49b98b985efc15763ec1f0a6e5b1d816d1458 Block traffic to unknown workloads.
- 7e1057a9b89857ec676a30319df3f2f2a884a3a6 Format code.
- 944e4980cf29b98fb6ebdb5a4a34ed701797d7d1 Markups.
- dc3bb62b948b68aff659276255775804dc954510 Make nat outgoing a "bypass" mark.
- 0f188b7065ea212f1e82f2c46cc7d4eb0832428f Catch background goroutine assert.
- a3e3bb3643d45ff7b323bade4d36240bd4b037fb Fix logic for removing happy WEPs.
- 3763aca2abffc5d010d0e7421853f398fe386385 Test fix: wait longer for jump map cleanup.
- 7e751aa360e60104c525dcd823dd43db296d949b Add config param to control the interface monitor's resync interval.
- 57ca7aae25e1f79c26cff1d930fddc8be96236ea Semaphore Automatic Update
- 4da528213806377af02c9390d7912f330c13e58a Remove inconsistency in map presence checks.
- c30cee1374f37a8e6fb69c4a96e473ed5dee6208 Refactor BPF endpoint manager to handle workload cleanup.
- 7f68f3b72aab63193ea316d6457db5936a2ce5e7 Clean up struct naming, fix lint.
- 63122e1d1d01c0e6988fcc476f7b55d86a01cce3 Check that BPF program is still valid on each policy update.
- 0cb08d96bc5504822aad27fe7c04e969da3d78e0 Add FV test for recreating interface.
- 864ec2c3dcfd56930646d08ebb689c9885d9026e bpf: CALI_F_L3 unifies WG nad IPIP egress
- cf3ccc7e3dbe9de92b469ac5d5e280567e0e5546 bpf/ut: test compile/load  wireguard prog versions
- 05ca05e7ba04ec820a2e0aec4dbdc179b993952c bpf/fv: do not test 2 tunnels at the same time
- ffcbd3129ef8737d1781115f12086a6b2e1a6568 bpf: skb_iphdr() also prints IP id
- 506d8ef018388b5c1d35c46b204e6c35e52c4a47 bpf/fv: fix AutoHEPs for wireguard tests
- 97ec8d7af441cab9c2d19b893bf5adb97cfb7e8f bpf/fv: fix expected host IP with wireguard
- 4e48dce462bd1274b2c058f7a927ffd839b1b2e8 BPF syncer changes for LoadBalancer
- e3f723bded091778e89533ee8fd3e7261a0b7ad9 Changes to handle LoadBalancerIPStrings as a derived service
- fd555a5b93d4ae1a87c74009ba27b66530b720a6 Semaphore Automatic Update
- e524812b495460e26125c4f73aa234179b621dfe Updated the UT for external Ip and LB IP strings
- d5351fd4a6a9d316338bae6db65d89e5fab822e9 Removing comments
- c9107eaa2ba0c47854228efb4081fbebc84dea17 Changes to fix wireguard ci failure
- 6c1944eee3083c61d680098780edb6c9c8fd5bc6 Update .semaphore/semaphore.yml
- 6f6dcbf2ef4b51b730a407191317424000ba902d Addressed review comments
- d53db5715a948a9d2826b821d86f17fc6a0d3057 Upgrade to golang 1.14
- 1906faebc89a76a7572db7863b16cd4bf1495f3a Changing the LB src range UT to test with extIP and lbIP
- 6ada6707086b3ce11c1517cd42c4fe4d45f8c6b6 Remove vendor dir if it exists on clean
- 6944e18eab2aad6ef639cd29ba706cc2ee771363 bpf/proxy: benchmark proxy golang part
- f0cd537810af74635190946af2959124ec1588ab bpf: BenchmarkServiceUpdate for single service update
- 34b16acc1d9e9abcc5e2f9d91f15b1d06b0ea5a4 bpf/proxy: less evaluations/allocs for debug prints
- 50f90875b5c5fdd1a9a949625a34a5693f906e9a bpf/proxy: remove unused code in benchmark
- f2ef9b303b33ad1bfef75768d93ffb97fb76fa86 Semaphore Automatic Update
- ebe17e9a89015a9bd4dabfaf1eb9d5d33f921790 Add map iterator
- ae1816de164e902388f40fb47ef1f0a7fae2978e PRe-alloc attrs.
- 7cbd8c6d97a5aa120fcffe148f330d266677679b Use return code from map iterator to control deletion.
- 8f6db398381fe455fa075d6b6efd77f920463127 Fix bpf syscall stub.
- 321a19c8679c251f27690511ab8dba4a0507ae41 Fix a couple of missed refactoring updates.
- 5113e264192bd81b6bb60e9a6885e6c2308e44dc more proxy tests
- 89772e7e43929305e43d7e3b25b50cd9ae5ae0d9 bpf/proxy: start with preallocated newSvc/EpsMap
- f9ed4810eda81147055765ea67552595cb813f19 Semaphore Automatic Update
- 4ae0951681c932cdea46f4670e73cfca1fdca8f5 Fiux shadowing of variable, and add test for iterator action return value.
- 697c80e3963af53b7477009a7def5534d140899f Cleanups.
- a8d39c97bb2a74d7f45d54473f3a98162f859298 Fix up mock maps.
- 8456d320a3b2c92ef81332b55beec3e4bde913ec Cache kernel time lookups.  Was spending a lot of time in ClockGettime.
- 933bf65ccc1afaa759fa33396f3ea80a9fa61be3 Avoid more debug allocations.
- 65172005343978e5f29fc628ca85ee4be26498f2 Batch iteration in cgo function.
- cd41c59df0f08ae28bc7088c8cfd28b4820eb47f Remove unused map iteration variants.
- b9ce9e8f0062597963db36ce4cce8cfacc72889c bpf/proxy: remove the build benchmark tag
- a4bf4bbf9220c5165a2e79b96aae5bcf80208b4f bpf/proxy: check errors in Benchmarks
- 7abe6ef50aaf925b00cf4d5aeb4caed293da8778 Semaphore Automatic Update
- ca3e53bab0a7d1996cdca428409895fc92343d6d Fix up conntrack UTs; move to timeshim.
- 417c731357a96d13e156b0d49be06804b36a1473 More UT fixes.
- b56a54be9bfebf69fc86d8093f3937f35e0a0e0d Fix race between interface deletion and cleanup.
- 09177c3d3e5f308ecf4855f6faae3a7a0d13c0e2 Fix missing return.
- 94845844fe1a4031f1be2ff9e0e2afc96aa48fbc Add silent retry for loading BPF program.
- d580283bf056fe574a8bac1ce4fc8bb3071b38db Improve tc error handling to handle non-existent interfaces gracefully.
- 1f3a32582e183e21d33ab358d5263332c2085656 Avoid race between attaching qdiscs.
- 9c2472f6e69eb068b1bd6b43f6306593d0dcfea8 bpf/proxy: syncer tests with maps and service types
- aefd38b53178c106320b0a3359e95b0d132c40a0 bpf/proxy: preallocate slices if we know their size
- 0abce35fef713fcc3f26c036b8994a132cede4db bpf/proxy: do not update unchanged services
- a6853322a5be59c1bc3e7ef1eb900c2fd08f19c5 bpf/proxy: do not overwrite derived if unchanged
- 364e97637d7336e3de29e31afdda80439f3f2154 bpf/proxy test remove benchSyncer from syncer tests
- 4b3f165c6f9ce1f55d4f0417eb2f14a1a6a2a58b bpf/prox: benchmak Fix nodeport allocation
- c79ea203a8135d0bc5881f3ea9e5a8babfe8169f Semaphore Automatic Update
- cb49d31188dd87fee24cc5c9d1982f8b84a71316 Added windows code and fix copyright.
- 5f26748193ad43536ecb7a457f16e84d670aefdf Markups.
- cd6ee8a689e8598788f9fe86763f812461473594 Remove !windows build tag for bpf files
- f3cb36b46b1c77ea7149ec0fd855d25b91c6aa73 Reduce log spam from missing interfaces.
- 5c95883994603c9227cb734ae037f0b02b37cae4 Fix slow retries in route_table and finesse logging.
- 677e2381fbbc90ae51aae2be0a7cf2aae798e537 Fix that profile refs weren't cleaned up when removing endpoint.
- 2eaef06ddc53ea49b056dd7f350eb0dac8cee6b3 Avoid spammy VXLAN-configured log.
- 7e253278335b7703edd3b239fb85131c717f4011 Downgrade route table "not out route" log.
- ffc8522d62ce4b25448339896420fbee22eb1f01 Suppress conntrack cleanup errors when no flows are found.
- 32fc92f78a10c35ef5ab8238d5f73b1ba3b67cb6 Avoid error logs when interface is deleted while searching for its jump map.
- 36551ef471ab2ffcbd89d1c89c8b9dd4efb1c4d3 Downgrade error log within BPF prog load retry loop.
- 353f749f988dba5877f2e33a31c0b0049470e23e Markups.
- 56a4178e2058c803504143590ead999126eeea44 REmove duplicate check, log out conntrack's actual error.
- c168b4b79f178bb5cb878c242460be7862721965 Only log final conntrack dleetion attempt above Debug.
- ce9e42243272772fbd7135274632e7648184fa3f Optimise conntrack command execution.
- fd3090880c64f1c998e9b51e87b995c0f179277f Reduce severity and improve active rule calc's missing profile log.
- 67bc1678bada61d37b0bcc9dd40c57e695bfd00c Restrict parallelism when applying BPF programs.
- 4af1b3c2b323d849c755fb5624f2471bb615027e Beef up bpf syscall retry.
- 973c7e416cfde75552e605b24e91e588f0b687ad Downgrade status combiner log; spammy when interface is removed.
- 5020ef1a3d20e77ab0b1eb96bf94b59bc3314e2b Detect another possible tc error output.
- 6d5caa7d3927cb360dccb923df1fe816a8b1aea1 Fix that async calc graph could fail its watchdog if dataplane stalled
- e8dc0dccbd29c636de0c5df64a79e2f1646a494c bpf/ut: fix TestMapIterWithDelete*
- d5029f3070d23d75c54da1e6b3073216e7193240 add MapIteratorNumKeys to !cgo to pass linter
- 799971424132fef02ffa924280f28fbd2faad108 applySvc - make error always the last return val
- ea91da0ae3566c2ce3dc444a59f9256df962c498 serviceEpsEqual in O(n) with O(n^2) fallback.
- e9ceea6d0b71297021ea6ed234a3c49b7e9ac100 Semaphore Automatic Update
- dd0adc7885787b2429742239b160cc850485938f Fix leaks of BPF map and program FDs.
- 06482d874dc0f2e6b607f68526b711b644ca126e Fix that state of interface wasn't written back if info didn't change.
- 363e1974fe551266068ab091672198470e29349c bpf/conntrack: fix assumed ordering in NewStaleNATScanner
- 1a407846c20ceca2ee6ea5df472f4f225125af74 bpf/proxy: Conntrack cleaner runns immediately after sync up
- 5c97f346c9b8fd469c8a169e2b10f5754fc33013 bpf/proxy: run liveness scanner immediately
- 9a60ba235d53dd0fa93216a933265e296d319328 Semaphore Automatic Update
- 949833c943926477d2ac1894fe59929d89637444 Merge pull request #2457 from fasaxc/fix-cleanup-race
- 3710cbc23ad8d551e17f6ff2a259ef3ea89271e6 Merge pull request #2456 from tomastigera/tomas-allow-to-host
- a7ab3b8ddf4b163b47c7229fb1bdb4460d7b77a7 Merge pull request #2458 from fasaxc/fix-cleanup-race
- c68a6e116a150dd3ecca0ccd9ffd0a42e8aeead7 Merge pull request #2459 from fasaxc/fix-cleanup-race
- ae746553df1f37654b76cd50a9e4942f42604daf Pin back to release-v3.6 typha and libcalico-go.
- 62d29bc84f39523639b074505a6427a94eef610e Do a bpf_skb_pull_data is skb is too short.
- d8393caa6108ee5aea31caf71ba7c53be40f2349 Try to pull enough data for TCP.
- c81c43aec5820e60009864d9e519cc92d4be4112 Markups.
- 138b607f4adaa0227d4bfc9661d305ccd1f51262 bpf/proxy: stopExpandNPFixup only if runExpandNPFixup
- 562990a7452b6bc1aee85a73df1e694ad2308c2d bpf/proxy: ignore bpf deletes ENOENT errors
- 09b99aa78e64feb1252bf1f9cd005814749ca0ce Actually check bpf map deletion result.
- 08ffabd8e101427cfd36c0f2ae48d7d35bd13599 Merge pull request #2463 from song-jiang/song-fix-ep
- 4fd7f7fafbce8dc98728de01cf87df4507237fcf Update pins (#2474)
- 99825c368b15322e5d23d70a1330cb36ede2ea7d Fix policy updates for Windows dataplane.
- 739e50af18ff6296d1c5e85b6b974b9b6591ad8c Log out k8s connection params, used in BPF mode.
- dafee87b314db70cc5cf6e8e0911ebcdd1d1094c Update pins (#2478)