Tags

- 959807b86acbfdabf6094822dd2a39da0bb918ee Automated cherry pick of #2345: Disable accept_ra in workloads (#2346)

- c830e0b11cf285e21fac85a90f963743865ab40b Remove git-review machinery, to avoid Change-Id comment in each commit
- bff86b9df0e3b13b5789fa21ba8b5607cb38ef1f Avoid generating duplicate sysctl lines
- b7321abe0c16f2dcbef4c8368564f266c62b1b44 Need --system, not -p, to reload all sysctl conf files
- c7a8fa108c4b265212831ff1a30e705e7d9110f5 Support IP protocol names in SG rules

- 42fed6248a81883ca20b9dc2297c6ab6f7c1e5c4 Run checks in parallel (#423)
- 18b963770c8c60e646433fc7dea3079c3ecc2e57 Autoselect default IP pool if overlapping with host IPs (#421)
- 4e6c7b848533031910deda54ebf99bc06733989b bpf: MTU fixes
- 02feb595da49bc4b20ac7e0a7e68fcb3dd0a726b Add HEP permissions
- 29d201a9c53f3c75e3ce94b0a477e6c4099eb272 Add test which catches IP leak
- c38da9942c77a9722c9aead944d9ad693b3e1eb4 Attempt to fix leaking of old tunnel addresses
- b8846019181f441427e3ff146a86e420d2e071a1 Speed up IPAM tests by running fewer iterations
- d09d0c3d5877eb50b96742dfe0c0454e618ea0cf Shorten retry sleep for faster tests
- 6fab4bcea16156f876752ea414efb97617c990fd Allow more time for CI in Semaphore v2
- 573bf95affd71e055e9c24928e14dd788c8d6d60 Don't leak addresses if the node object is modified
- 0c44940df5994720b352095d6f5244114f8edc43 Add graceful restart test
- 5b25053b3c7268dfca54972711698e79b5ab3540 Allow for so-far-unexplained flap of IPv6 workload block route
- 91fb21ca53610f63c347f0ce82d7942f6e12ae18 Release tunnel addresses by handle, always
- dc4c458d4038f14e7630387557b9a3aad5e93462 Update UBI base image version
- 2b72b59a6f508bf70c48f5f36d09750afd78d83b Update tests for KubeControllersConfiguration
- 4ab47acaa78c47da7737ad03f5c753016823be98 [phone home] Distinguish Rancher deployments
- f28e5257139971834d70ae92b90d3cc19b9488b7 Query for kubeadm/rancher even if calico is on policy-only mode
- ba67898a164211bb755f159e220e7a41f54aa591 Pin ubi-minimal to 8.1-407 for now. ubi-minimal:8.1 now points to 8.1-409 which requires fixing our building of iptables.
- ed3cf44904e5aed618a59aaeec490c41f9913a98 Update test manifests with RBAC for kubecontrollersconfigurations
- 369caf6582a25ffa01be31cfe0aeb1f8c0c315cd Fix ipv6 svc advertisement tests
- 638a821e5c3e01feb66b1b33fe20960a60751337 Set component field in log formatter
- c8c583e55914a043635b26f5f3fa61f417135991 Update pins
- f7d988f79c6cba4f69cdf6dd08a55f65e51767fa Add GlobalNetworkPolicy short name
- 3a41f6ed3a181cacff6d56969e97de0ce6560a59 Rev libcalico-go and felix pins (#466)
- a008204424a9ed47dea6061b2b0ebb371eb3a21f K8ST: Better code for DaemonSet update
- 3ef4c1184a3a14a3dfb4a3726e69f2d4a7fcd96e D'oh, update callers
- 58b9535094eb16b01d8b8233634ce3381425a77f Fix order of parameters
- fb4b4f0cf62ac5af9149b985680a90dfcb677202 Filter out default-allow profile in test cleanup
- 6b5db96ab2169d5303b1a882a36e9468f9641b68 Update of libcalico-go pins
- c760fe6f4fe25ee20f65861398cb5be2f5d91d31 Update go-build
- 378e76674389353f3e7927487389318bac931a4f Fix cleanup in other tests too
- 4c1d1141eaa21751eeb2d8cc12979e98629552c2 Rev felix to pick up BPF RPF updates.
- eab27d110dafbcf86f4df2306d953593be595880 Move pin update job to promotion so it can be manually triggered.
- ef565a4076263653044643e35e2b8196441b869e Add ut for blocksize validation failures
- ee69b6fa1a5362474a7e96d889e99a81332ab139 Ensure we terminate a validateBlocksize on incorrect ip version
- 5d351440b07c1969e17ba34ecb8a058ee60e6ab7 Remove check of SEMAPHORE_WORKFLOW_TRIGGERED_BY_HOOK
- f26d85c685f17449234c461ee6cb74749c7bfc29 Add SSH key to pin updates job.
- c414e12a8eb3c867cdff5776fe8f697a0f915528 Fix perms on key.
- aabfa98c38cd19a5ee479e74b26f2d308fb13630 Semaphore Automatic Update
- e98efb6048e06886a64fc12dcbd90c85df03a551 Semaphore Automatic Update
- e6b3fd4d878efae8a0950ad826ed1ddf3b83908e Semaphore: Fix PR check
- a0e4ccba690f5db51254b52e207357fa21afb596 Semaphore Automatic Update
- 6f833b69f9f75d152be0f0df60be92b307f6a4b1 Update the semaphore cd
- 2c83680048bf61dd438f4355f892a41c9156bccd Add the BRANCH_NAME for semaphore cd
- fb50c99dba1d60442ffe412cc8f5faec7f066870 Semaphore Automatic Update
- 2b667c86d911ded2a5f89fdf94dbf97766deb56a Semaphore: Build all images with cd
- bc3e6b60ff50969cf546fb20905b5a9a8bc7f407 Semaphore: push needs docker credentials
- c2318e3b266b47d6994312c604d7bc9cbfa53af5 Semaphore Automatic Update
- d04635a31570a94c712aa261ccabe10494f20631 bird health check add error type judge
- 3e76f6acc5250bc4370bee62aa8b7f20effda304 bird health check socket file exists
- 58a1b6a4a9cde11e6047e78a4550c529f5f468fe add goreportcard (#433)
- 2e8bebd6c0738dcece30b3135132ba23c8d3d857 Update pins
- 4cd4a34fedf94e7ce0b47c7117aac83c6d29dbfa Semaphore Automatic Update
- 92b92d14b758fd06759b3300242bfeb58576dc33 Add git pull to the update-pins semaphore job.
- 25256d60266ce754caced97dec2da0f8d4534a93 Semaphore Automatic Update
- 54a51f88f09402ce99583933b744286cfa4bdbe6 Update license attributions
- 453a0b4932e4d8a27bfb107ccdef27c160d381f5 Semaphore Automatic Update
- a99d4e73fdb43c08a1a6bc695a0a6609e358149a Update pins
- 0b10c011ce76c06c1048b752ef637f00c84d394b Update go-build to v0.39 for manifest-tool update

- 9cdaa243c8078ac6fbc689bde07a180ad69f1317 Update of libcalico-go pins
- 4084caca520578af3a4a5073855e918cb1346df7 Update of libcalico pin
- 8f9cd467a9868005b9edf4b45ef618255c88acad Update libcalico-go to dda4a7964ffad2dace251d0a8f95c2ba78ec91f8

- a4fb2fbb4311b361dade9fd6bb051cc20918c692 fix shell stderr redirect error
- 46cacbe546ced82015b743afed00b071df0d6688 Semaphore Automatic Update
- eb8d45cb98092631a65f8a87982f9de03420e253 Semaphore Automatic Update
- 86dc01f5d45ebe29349922b6b0c43edb859628ab Change base image from debian slim to UBI
- 96b2e5b061279a5982e4fab1559ff9be25d15747 Add `hostname` to the image and pin image
- a1b7737a0c35b524cca3d99c4a10540fe80ce789 Use mv to put binaries on host
- a75e772fdb9e7f4b70141c680bcbd6e63c6badf5 Semaphore Automatic Update
- 2eb945f8091d8c3d7e528c9f257e46dd22a6c73c Semaphore Automatic Update
- ae000876280bdca7f0a52e686ec235928df0e2cd Semaphore Automatic Update
- d335c63c3184c9134a29ac20fcf87372232722a9 Add dataplane interface and gRPC dataplane (#859)
- 74c07e6a5df9945607e9983ce5d9aa21c7e78868 Semaphore Automatic Update
- 2047c0630bd9c6a7e3c685c2141d9a76d17cd862 Semaphore Automatic Update
- 798a13eb2062768658d2000e3ae083ef843f9a82 Semaphore Automatic Update
- 0c5a357c9057f035a19d5e96f43ab8880e868964 Semaphore Automatic Update
- 506a68e9448066106770b4b87df6a8ce2c0034be Update libcalico-go pin
- c46cd135100c213eeb3335b9b29138ae660480ec Semaphore Automatic Update
- 1e93aa9f2f188639a72574a5b2d7d3d30ff0f916 Semaphore Automatic Update
- 6759921675163a014f91c1e20c9522c6feafdfd0 Semaphore Automatic Update
- 0cab7f23c257f37ba95473301304d2f3d4bb44f0 Update of libcalico-go pins (#867)
- 27ae6c450845e24090ce21dca58306e4231faf3c Semaphore Automatic Update
- 5748653eab958aea22ed0d292f4f3fb5cd4bcecd Semaphore Automatic Update
- 5ebee263a0bb75738a48b892b4037858cc964025 Semaphore Automatic Update
- b0670c287f525ca55452123ecd9f28409e667e8d Semaphore Automatic Update
- 6953b2be9d433bfec132cbe424af2558789658ce Semaphore Automatic Update
- b3c9a5ab85b0759aa2e65fbd33a1a242fe2dfde3 Add licenses to built image
- 53c9fe11b3155be16a5554889202b3a58604ed3a Update libcalico-go to dda4a7964ffad2dace251d0a8f95c2ba78ec91f8

- 9434b9c55e3cfc02997797c0d66b6bf6b7c92c89 add comment for using ST_TO_RUN variable
- a332358d7c60ccc603de3fa3634431e61a4d0224 Semaphore Automatic Update
- 9b6b24aa83adede340f5ba9e6d2031827736b9db Update libcalico
- 46a19808d51220ffd89fed93165b622912f3acba Add support for KubeControllersConfiguration
- f6c398edf6745e8b15663095161e333963fe9afd Semaphore Automatic Update
- 1251f7432e96d8f27188a5b15f30113571c78912 Update go-build to v0.37
- eeb8d8f74cbfae90e39b22a80681c9aabeed69d4 Add kubeControllersConfig to apply docstring
- 30b6659355a6a9d88ea0dc4135c6dd31dc458943 WIP: Operator: Update calicoctl to ubi as base image
- a658e42db5c5a06507eea16ea984f2813d034db5 Update KubeControllersConfiguration to use metav1.Duration
- ed3b61731dc8a0fdfc4e3cb05b09c72b1568e937 Semaphore Automatic Update
- a7b1b1f25594e25928f62cb17164db69913d6bfc Semaphore Automatic Update
- a6e96edd583772c5a0d137fd152e0d9b9e015ec2 Semaphore Automatic Update
- 9a418c13141d5bae480a4115d7e5cd97272a9184 Semaphore Automatic Update
- 5e9a58d4e098400d49cfc7814b089c279358aee5 Update libcalico-go pin and update tests (#2121)
- 72e545cd79b1839c1df3d71ad32cfc602160ce43 ipam strictaffinity
- b79637cc7c295629b0be3c5db88e11e180f584fd Rename configuration option to show-configuration
- 5cf42b06034d012462f35d50da70eb993a178d4d Rev libcalico-go pin
- e40a6103f577b33b5cbec165c8678dc7fcdb77bc Remove un-necessary extra print. (#2124)
- 043d0c533f8c085785300bcdc9d4282175a83f37 Update libcalico-go to dda4a7964ffad2dace251d0a8f95c2ba78ec91f8
- a6aadfd8fb042b9a6e8c6d3e701ece6a0bfcb858 Update go-build to v0.39 for manifest-tool update

- 376e3a5a5c12a5a5a98b5081fb7c56014170631e Semaphore Automatic Update
- c58539dd3f5fba189181886e3cfcba518f8e0661 Automatic HostEndpoints (#458)
- 8b513d852e7811945f965c7b4d21fa338d79561a fix: correct string trim func usage
- 0a80768a1109ce6533247361f5bf634dc45e8097 Update libcalico
- cc69f69c02a40e59a1a72fd77be2481d7adbe6f0 Semaphore Automatic Update
- 2b26c4bb44ac753c1f6fe25ee123869714796f84 Update go-build to v0.37
- 91e5bc9be049fa73121ab8d6554ff91d0e4cb474 Semaphore Automatic Update
- 0e79b5228c99b041672b5de9b36f089fe8f8ae66 Use KubeControllersConfiguration resource for config
- a686dcd905257da544293c1e6fc8e0ab5595ace7 Fix comments and improve logging
- edc4a6f5e7f9691bb20e1baf89f6653d129c78ac Increase timeout on UT
- f359989aeb8eeade724cd326578744360e03b07c Fix watch race in test_config
- c195f394983bf93a57f73cfdaf0e6bb7bc1d8f5b Semaphore Automatic Update
- 3d3dd0e5ea5f69a61ffe67a2cd4e34125e51758a Semaphore Automatic Update
- 4041836e7621d2fdcf940bf282fba54c20c4daa1 Semaphore Automatic Update
- 8c5242b764694a459c7e692f6a8da1f7f7029ae9 Semaphore Automatic Update
- 4da400c877114bffabe29b1839943c2b48753f5c Handle mismatched nodenames in etcd mode IPAM cleanup (#467)
- 70ca90f9f484f3127871444baa242b244a8e5411 Update libcalico pin, handle conversion from pod to multiple WEPs
- 111ffda31568d383388cc7848ce398c8c423bc91 Update libcalico-go
- 9eae34c471094e59a79635af5e540b9feec98f7b Add default allow profile to auto host endpoints
- 861414ea933a29a8b87dfa32861234ef902e5241 Bump go-build to working version
- 159a86b4e3f92c752b93492f55b0f93b1ca0a8cb Bump licalico-go again
- f5dbe2a971dc1e6f89930844343b644570da138e Update of libcalico-go pins
- f7b804066f07e5740d350b626fdb0a188fff858d Semaphore Automatic Update
- 7d1aecb86f0a640204884f15bc12d61ccb8b5b3f Commit to try to fix dirty build
- 2e436cbd6e4bd3a7a11a697fa5d1c390179f2569 Semaphore Automatic Update
- 9374b576237c9beb104eee74619e77341ea2c02c Don't skip processing auto heps if node label syncing is skipped (#472)
- dd85ab7514620763b7f00f3d9bd70a1206f2e319 Semaphore Automatic Update
- 0abc5c7f7ac5832cfa7dccd35c8cb1202a0b7160 Semaphore Automatic Update
- 01657db4b3bd1a1b5831995e411dba22bad981c2 Update of libcalico pin
- 0119a5549a34b6d09016558972e0a8afd13f0aa4 Merge pull request #476 from projectcalico/lmm-fix-watch
- 621ffcdf410ba7377f23859b1920ce6690bbff41 Merge pull request #478 from projectcalico/lmm-wireguard-heps
- 1c1937314aa42d8feda821b4c899037d97bd6c61 Update pins

- 0ffecc18a79f0d514b947fb2eccffb7c7751b11d add goreportcard to README
- a2e94014b20cab3e257edb370c0f435d813b6df5 Semaphore Automatic Update
- 2ec620b935d51d890b3eb48d42f7451931cfd5c8 Semaphore Automatic Update
- 11b950f8164ff33c4b14875520cb69822b8d04a3 Semaphore Automatic Update
- 19fde118f28d737bed02906e6b4dd0143722c607 Update go-build to v0.37
- 57aa4393f7a785cbc6852b5b95db479d7c557455 Update libcalico pin
- a88baea1cab8eaf16a08559be8c7fdd7a19dfe19 Semaphore Automatic Update
- fa12f622af2aee150220b862f33251d338151831 Use v3 validator for v3 resources
- b12bbd74f801445b067384a14be5bf145740c4d5 Add UT for validation filter handling v3 resource
- ff72eb9806cc008464cc7115db3c2d75e2581958 README: link fix + node-count recommendation (#359)
- f205deccbe351df44404228d708c13727ed6381e Semaphore Automatic Update
- 2252f3bdc2d20a25a04d205891e90982bb7cf6e4 Semaphore Automatic Update
- 3ab5d1ed2f6358b16d018a04d4b4faac3da24c06 Semaphore Automatic Update
- e2097e47eb86da7fd2ea5e66708338ed42e38e20 Semaphore Automatic Update
- 2810435683312dae9b384d4c10d76bd6e840ac20 Rev libcalico-go.
- a3b520aeb64e8a934a960f2459870d9c3e8c3a16 Add TLS to the dummy typha client.
- 61512b16f24a0b9479edfa7f55e8a89e5b43b50a Update to latest libcalico-go pin
- 5bbbc904621dc51fda69df30146119ba17db2425 Update of libcalico pin
- b546dd7e888a45023e2abd8c13733e4756b51aac Add licenses to docker image
- e6e4b1bb604550693aab27f26e8de384d0896926 Update libcalico-go to dda4a7964ffad2dace251d0a8f95c2ba78ec91f8

- 04b08f33387b5b5931d656a57a966263029df56b add goreportcard to README
- ac15a32159bfd4ef09c3deab5e6fc138be68c959 Fix misspellings reported by goreport
- 023b10c7a7cbd77cb9a770b106c1b90ccdf5c3bf Implement GC of cali_jump maps.
- 593719424d80883d6860de43f1444b890f431c35 Clean up empty dirs too.
- e99d83aef4fc3459d2e8065509543a8fd7b36ac2 Add UT for jump map GC.
- 3e27d9da3025b60957be83a1dfeab9688dd4a1b1 Revert "Tweak MTU calculations."
- 86d3c26d193df679a885c6b8c74c931ae41db524 Revert "Fix up tests."
- 0cd6f8b5da4de6d49d53b02c620c6c5c7091b3c2 bpf: adjust the WEP tunnel MTU to the 1410 change
- 6e95b14b03aa80d3b8b0d3c81d6d8459ac63a47b bpf: swap MAC addresses on redirect return
- 958933fb817ac8221d3694c46e3de9d9cce5e253 bpf: fix swaping MACs
- 34b8f81183836415282308e4c2759beb5f2c711e bpf: fixed typos and added MTU comments
- 6bbc1abb5465d29d1e4739cf065bd3a77b1c6cc3 bpf: modify skb-> len mtu check to avoid underflow
- 8724564f2d3d62c95ae303d59d6c3224e9ec57b0 bpf: fix GSO handling on the host side of NP
- 905005eb5522ebc153c622d8c8f0a0947a57cab3 Revert "Flip src/dst when doing output fib lookup."
- 3d9a05bf33c6f168822d742880d34657ea60464c Revert "Flip src/dst when doing output fib lookup."
- 3d4479acfce250e50eb19212387283f0b2ddaef4 bpf: fix the state for icmp error replies
- 2fae2d7797ef3382713358c89adef8e470da441c bpf: mark icmp errors as approved
- cd7bd85660520eeb135aa40cb6688132e2d78ce4 bpf: allow packet approved for forward on WEP
- 14232e794c4fff0154f1e0deea7b573235e0d73f bpf: fix new line in a debug print
- 5759f342b4b780a98b4e4bad4e4e081e0073733c Remove unused constant
- de4880351e8b4382c2cbf82614fcd4ab11619238 report k8s version
- be0c7d7bab866bacb632a32006ab4d4f63c676d4 Beef up FV test infrastructure.
- e8af321fc9fa30b9262d317d20cc0b1e76fb2a7a Update go-build to v0.37
- 19c5de753b0b7d7daca92e9d98cb14f760b6f486 bpf: fv test for larger transfers
- 4cb4451ce802da998b262cb876f0d20c8635b7c5 fv: unify execution of connectivity test
- 6f6b347c9e8634d6197f2825badfccd1c193055d fv: add client MTU before and after to the result
- b491c58ce5c2e287e9394a49f01b9d8ea106f5de fv: test MTU expectations
- bd7f00900704982d4322dd5033f8799ffbaeb963 fv: get path MTU from workload
- e68335e0900604646f36b4f8f572a553ccf82521 fv: add ethtool to felix image
- dee509c0330156a832cd34ab843eb640f615b386 fv: test DSR and external client MTU stability
- 36ed98392000062d6b6a4a707be782bae8f94e2a fv: ExpectConnectivity supercedes ExpectSome
- 8010747bf1d4b2e2e52fcaaf10b76345a9698fa1 bpf: check the VNI of the VXLAN NP tunnel
- 07194d2bcac208cf7a823fd68b5e0003ce2ab747 Set log component for additional context
- 0b6d21d0159235496b948651d14d9b6c22d9f2a2 Remove duplicate BPF enabled check.
- 669a3ebcc12833d405db43d9e0de1299f06dc654 Allow DHCP from the workload, on kernels where rp_filter doesn't already
- b5bac768869193c0d87147fcb944bb60dc8bffaf Tighten pre-RPF DHCP whitelist to source 0.0.0.0 (anti-spoofing)
- 436673c3e23ff8b28d09ad368afdf342c0ae4fa1 Beef up explanation of what we're special casing and why
- e0e9a5b4f84508aed96a379e11e00cc2452a30db Fix up UT
- d9aac502e1d7205094045bcffe918735a70f8e5b DHCP special case is needed only for v4, not DHCPv6
- dcb80c2e44dec1c6682adcddeaca8f4587d7ed2a Fix linter errors
- 4c2787d19b5bce13bd3e600988c94566b4dd635d Use v3 validator for v3 resources
- 9e2a5f424ce9f683b7803e1d7ea8203582775fe5 Default to running tests sequentially.
- bf1af1d145e5c7a892f87789d89d2f35a8290622 Rework routing calculation so that l3 resolver calculates all the routes.
- f852cb7cb295c69326807c1028e60baab9df4d9f Add corner case tests for route calculation.
- ed1e6332443ac30593d3fed016249dd0da92bc2e Fix up protobuf naming convention.
- 5497c48eb5809bf04e4289068912aa86b255eea4 Increase semaphore v2 time limit.
- bc415fc83d395a18b589713dca19a1ac59423bab Lower log level on non-error
- eaeb639698ef7ad75a501eeee475966e38cfcc4b bpf: fix endianess of state->{sd}port for encap traffic
- 79efdd9f7792e0be6c83965b2acda2645b3cfe6b Normal policy support for host-* endpoints (#2228)
- 5afd243a64fa17ed4bf273ad60e2e9f4f8029cbc Add local WEPs to trie.
- 0e6d42b2ca5b789eccb93b2ae1e7aaa21a694690 Markups for L3 route resolver.
- 9f268d756ffd9aa72350f151df92e5bfc1f416b9 Markups.
- 0c2f4aebbb467b90549765ca495af2b372740807 Markups.
- 6c2e97f1ee14adc31a0f50cdddb0f4eccdd11888 Fix handling of local WEP routes.
- 651db76a8369d975c1cb127f5f071df0cd8f331a Fix up UTs to expect new routes.
- 647cefc6db5c7ee3bfa5dc7b5fab7860a75a1c3e Update BPF route manager to use new routes.
- 59fa9592cd289692f3b1fa86d17e513736a5bbd5 bpf: configure tc.AttachProgram through tc.AttachPoint only
- a6d1ea6455668afbb71b2a3c4410cabae0c3259b bpf: tc.AttachProgram() is now a method of AttachPoint
- 9a3d89ce0ba926090cc6203f41e162532ac55681 bpf: AttachPoint is pure configuration
- 79fd7ed0d9fb0a7272eaa98c3191286991f9d075 bpf: abstract manipulating precompiled binaries
- ad4fb8c3ec50a68c8e2b48f261fc379bbaaa627d bpf/ut: bpf .o not generated per host IP
- 663c031d261a92eb181ac4abc4fd4f5e2e3da42b bpf: load time configurables
- 3db4781c016d6fe6d1afd01f3996ffc2a26a4335 bpf: tunnel MTU is configurable via VXLANMTU
- 8b4a00a62ab80d8e8555dce8729fe28516e86522 bpf: fixed comments of TunnelMTU
- 6c7b6ae990b966521e2a6a99a60b78d310723c3c fv: test docker image to run fv tests
- c9ec6a4a5de05ae92dda926500a52b13b20db7c5 fv: move tcpdump to its own package
- 97ac833a32a613f9514658db04a72abe99249ee9 fv: fix for moving tcpdump to its packege
- b831a874b609586bedb6314fa5c92dbaa1a53b38 fv: install tcpdump in felix-test image
- 744647d7a5c93bfc4516f853d6d0c13ebe0cab47 fv: AttachTCPDump method for Container/Workload
- f8177f68f95e231a4be9788dcdec8d7b7dff3fab fv/tcpdump: allow finer filtering
- b63ddac19f156052449b17b72c7b5b8206eeb317 bpf: ct_make_key() to make keys CT easily
- ee18268279a66547f32acabdb2cf2d4f1b7e8e90 bpf: icmp related lookup for non-NATed traffic
- a684d887cafade18e45f0df308a881a2ca8d3e73 bpf: icmp_skb_get_hdr() returns the icmp header
- 1c8652b4839446c54355fb5ebc42dfb2802d7507 bpf: icmp related for NAT
- c49f2058d5d80865bc398ba952a8ce2f280112ce bpf: ut for NAT related from the host
- 290081d747f94b71ca860ed75e1bf4afa65d1c22 fv: allow  creating inactive workloads
- 57cf27a83fa0da665d73909814084b4cbf69f1c8 fv: allow to start inactive workload
- 910c0f635130851cf4d207398478eac2dbd75ed3 fv/bpf: addWorkload returns the workload
- 7fc04a8259f7b82597fe8d172686b3149c6a8406 bpf/fv: fix the IP size in makeICMPError() and test ports
- b483d5e71d321cfc9638a0fc194d02d17aa1349d fv/bpf: check icmp related outer IP header
- cbf1998927861b77396df774af970e380e07c2ad bpf: tunneling from host and csum of icmp related
- 2a5acc34725c0bae8acd918d45dc39e07bc7d21d Disable unprivileged BPF mode by default.
- be1b90f0d883ee7ea31ea65bf4dde61610c77723 Rev typha/libcalico.
- 8739e6f64ae032ca93e129b4fcfff4621cf278ec fv: tcpdump fails test if it never listened
- 43c8738431e650189db3b47a7d39d3de31fd3ba6 fv: tcpdump for containers without tcpdump installed
- 5dc2d4862129590bd5c4a666b9b45f02b32a06d0 bpf: nodeports and icmp related
- 65314c5573c518b42d0f0ee93c4376a0c46ffcdf bpf: update conntrack vars only when icmp related success
- e4759c1a791ac8901e55da7c4a16ef0096635e17 bpf: SNAT of outer IP only if returning to outer client
- 14b77219fe275153f918c566ae28d8cd7adb8ea7 fv: icmp related workload-workload
- 5c6a24e45586d4a31032b032a0966d91b0ac6c42 bpf: fix comment in handling ttl
- 83e5114d7799fa0322501268683963ef2b16542e Update typha / libcalico-go pins
- 7e0c6c4d1860dd138922dea19908e7f00a34950f Add BPF mode in clustertype
- 7cbe463549f5a423742c211f8df092b75a673e0c fv: icmp related workload-workload through service
- aa28d96bff1ed4e429464f3ddf175e31de92a768 bpf: icmp related retunign from tunnel is fwd approved
- f4e2b5c711568651c92d1ac28a0bd4e594b94581 Update amd64 dockerfile to match calico/node
- e4700cf48ff1ac60b1756f3203195c5a9b06127a Add in licenses to amd64 image
- ad33d3c12ef3316386fdc58399dee93fe6654fb0 Bump go-build to a good version
- 3845c01b509b6e2ad85907cde3b5a4eef89febf9 Install hping in the Felix test image
- 0364cf6db4d76feee8b38a33bcfc38061d42ff3e bpf: fixed comment in icmp related SNAT
- 91475fe0f8a1ab94a20f20868e6c7781b1593e28 Update routetable to accept deltas, exact interface name matches, non-link scope routes for prohibit, blackhole and throw
- 83c71e90487a901a9c187cdca322bde96be78330 Bump libcalico (#2267)
- 72dbcac76f7ef5a846549d8c8982d75671afea2b Semaphore Automatic Update
- 2cf09d1f132986b9decee312f8a4c3c98aeb31f5 Configurable source for routing information (#2269)
- ee7f85cec223fa7137e4d5534bf96f44c5d57a34 Test static arp invocations
- a37d11b0450daca3e42dbb48402d4ad61a6217e4 Revert "Merge pull request #2264 from lmm/update-dockerfile"
- 627a4ad9ef4d482b0add4609f8725fad86f93109 Bump libcalico pin for pre-merge new config field
- 06154760dfdc68d744d6605344126a59ef11546c Handle route table range config from libcalico-go
- 54d1d6213519e1501cef114f7a8df6e09fb505f9 Add and use routing table manager
- b66b3152cf7efe2f4de47b30ecdf23ae4ec67c45 Placate the linter
- 1a0f33b9cddd07e5e35a18b067da51de22e0f1d0 Add GrabAllRemainingIndices API
- 7995f5a7d91adb22ac1fc0d75224ea887505ae3b Make more generic: IndexAllocator
- 10d69b61e7de7cae6d6f888f362d24a6e383f722 Make sure we safely take a pointer of the target
- c7ea942ce6e160df2c59a7dace0cdfd8110934cd test: fix static check in routetable
- 68d3032da4898d00a4e33e07a668b660a959a290 fv: pktgen - a utility to generate raw IP packets
- 6c94a4caa176b32822002b069008ef75b0fe3583 fv: add pktgen test-connection and test-workload to image-test
- ee55a7a1420901e46a5865c25e08961d6b82cb9a bpf: all bpf tc progs are either from or to host
- 0d269922e2cb8d01e23fa3dcae32205a33bba882 bpf: rpf check for conntracked traffic
- 82db3b90c85bca54d67e9a2b18534dde96354a1e fv: test for RPF drops bad packets
- 6d20a6423767662911e610f752ff2e7c65b366a8 bpf: first packets from outside host RPF checked by host
- 9e540fcefe0394b7efdb38347a8f0403676234af fv: test for switching routes in multi NIC env.
- 1b5c9bc4126de1b9c7510be5e84cdbe5f984aa75 bpf: always use ct_result_rc() to get rc
- 651277b58f25403d0dddec646dc642c217168bc4 rules: single out RPFilter() for RPF rules
- 60b41a07001a38b94e90e123d34ec535260b1ae1 bpf: make strict RPF check using iptables
- cfbc1d43856f32811208e04266d6eeb1284fd240 bpf: every packet to host is marked as seen
- 876e66b7ba9dbf08dd43e07e226b6ef72028002a bpf/fv: fix conntrack.Value decoding and improve RPF test
- 44684ade50fa18022b1af2d2431f2bbd97e0e60f Semaphore Automatic Update
- 389ce360a469e511f96ae29b4d499e5e34e38be1 Makefile: always rebuild image if there are changes
- bfbc3713bacc33ac200114c5fa666b795f77fdda Semaphore Automatic Update
- 58e13d5f47d8dba499a013603da3323a8e8c9805 Remove accidental libcalico-go pin from personal repo
- 8f7555eb6aa50cbd307e56455d1b44d607affe98 Update to latest libcalico-go and Typha pins
- 06c29428e929d6e45a2cfefe5a229dfa6c1b79c4 Fix logging when VXLAN device doesn't exist.
- d481094002b90fb9e3d9bd7b10d2b7ae166eb23f Optimize for route lookups by node in l3 route resolver
- 469e44aa6398abe08e18153709ba07eae6d2a6c4 Semaphore Automatic Update
- a2644a45a250588594558b11af67abba11b0ae9e bpf: conntrack table V2
- 0643f147f8a5fa8de66bd7dc6979d09fca0d8ef4 bpf: v1 maps defined using CALI_MAP_V1() macro
- 704c9a5c14742baf8377b4864ebd8061ad5dc28d Wireguard implementation
- 1e3003a2dc1ac8e612c2e1cf1aa5a953290b56ff bpf/ut: allow naming ifces in UT tests
- 8a98291c6f596a04cc51e440039c84a84aee46b7 bpf: do not override fib=false if no forward
- 4454d1ee02d8e15f1833a1ece1116eabea757dff bpf: simplify whitelisting and test it
- b6534859596cf8b9baad6b60b3dde72a5fe8572d Semaphore Automatic Update
- be9999edcbd6f6b475ab6a448d9cfcbc68da371d Merge pull request #2287 from fasaxc/bpf-kernel-ver-check
- ac565505b977176a20f93db161382698adf050ff Add rule manager
- 7cb8b55ffa7f4b3904793ee003a5d6244bb34e8f Test resync after deleting rule out-of-band
- 9c3dc46028a7975d8d8b030ca35963e750b07ef9 Delay felix startup
- 35d7e508f8c253b12e109d2dee5054bbbcca2cc0 Only route to wireguard for workload-originated flows
- a01817dbcc94085df2877e5e9bfb7c4399576436 Don't use log context in multiple go-routines
- 8b49fe374848561287749976f98f69ac3f8584de Ensure table index is assigned to wireguard even when disabled
- b5321e489358f719bfbabc639a19d5dfcdde3fe7 Merge pull request #2290 from tomastigera/tomas-multi-nic-np
- 2ff8e2666bbdb13db68aa220e578c31998a59684 Add local throw routes to wireguard table
- 7e343ad871ae6eb1d4908069fd1cf79d5888a550 Merge pull request #2301 from robbrockbank/fix-conntrack-deletion
- d56c03e46d8cdcc051f7385aa80a0357cef3386e Update libcalico-go and typha pins