4319bc47f6
build: bump to go 1.17
...
Signed-off-by: Casey Callendrello <cdc@redhat.com >
2022-01-19 18:23:45 +01:00
186edecd6c
Merge pull request #687 from MikeZappa87/issue/588/removegArp
...
Replace arping package with arp_notify
2022-01-19 18:14:55 +01:00
de5cffee1d
Merge pull request #686 from silenceper/master
...
Ignore NetNS path errors on delete
2022-01-19 09:08:06 -08:00
135eb1dd85
Merge pull request #681 from mjwaxios/master
...
Fixed DHCP problem that broke when fast retry was added.
2022-01-19 10:47:53 -06:00
7a55617a0e
Remove arp notify setting per comment
...
Signed-off-by: Michael Zappa <Michael.Zappa@stateless.net >
2022-01-08 10:03:44 -07:00
5d073d690c
plugins: replace arping package with arp_notify
...
this replaces the arping package with the linux arp_notify feature.
Resolves: #588
Signed-off-by: Michael Zappa <Michael.Zappa@stateless.net >
2022-01-06 20:53:54 -07:00
67110e02ba
fix #685
...
Signed-off-by: silenceper <silenceper@gmail.com >
2022-01-06 20:57:52 +08:00
1324428a9a
Ran go fmt so tests would pass
...
Signed-off-by: Michael Wyrick <Michael.Wyrick@caci.com >
2021-12-28 10:43:52 -05:00
fd4c3350ae
Fixed DHCP problem that broke when fast retry was added.
...
Signed-off-by: Michael Wyrick <Michael.Wyrick@caci.com >
2021-12-27 13:48:44 -05:00
cc32993e9e
Merge pull request #670 from SilverBut/ipam-dhcp-more-options
...
dhcp ipam: support customizing dhcp options from CNI args
2021-12-15 10:50:52 -06:00
b76849596f
Merge pull request #642 from Nordix/dpdk-ipam
...
host-device: add ipam support for dpdk device
2021-12-15 10:50:31 -06:00
c9d0423023
dhcp ipam: adjust retry mechanism
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-11-28 06:41:53 +08:00
57e95c5dfe
Merge pull request #669 from containernetworking/jell/per_if_sysctl
...
Allow setting sysctls on a particular interface
2021-11-24 09:07:17 -08:00
092009035b
Merge pull request #675 from nokia/ipvlan-garp
...
ipvlan: Send Gratuitous ARP after IPs are set
2021-11-24 10:57:21 -06:00
547a516c30
add ipam tests for dpdk device
...
Signed-off-by: Periyasamy Palanisamy <periyasamy.palanisamy@est.tech >
2021-11-18 15:10:29 +01:00
3033fd2e75
add ipam support for dpdk device
...
Signed-off-by: Periyasamy Palanisamy <periyasamy.palanisamy@est.tech >
2021-11-17 21:08:08 +01:00
d5a6569102
ipvlan: Send Gratuitous ARP after IPs are set
...
Signed-off-by: Ferenc Toth <ferenc.2.toth@nokia.com >
2021-11-16 14:32:57 +01:00
f1f128e3c9
Merge pull request #639 from EdDev/bridge-macspoofchk
...
bridge: Add macspoofchk support
2021-10-06 08:39:10 -07:00
27fdec5cb9
dhcp ipam: fix client id
...
First byte of client ID is type, instead of value. See this from
RFC2132:
Code Len Type Client-Identifier
+-----+-----+-----+-----+-----+---
| 61 | n | t1 | i1 | i2 | ...
+-----+-----+-----+-----+-----+---
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-03 05:57:27 +08:00
a1051f3bf1
dhcp ipam: rename inconsistent options among files
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 23:49:59 +08:00
c627ea807c
dhcp ipam: add more options capable for sending
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 23:30:59 +08:00
4b216e9d9b
dhcp ipam: add fast retry
...
Almost every first retry of DHCP will fail due to interface is not up. Add a
fast retry to reduce unnecessary latency.
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 23:04:24 +08:00
2bebd89aa2
dhcp ipam: support customizing dhcp options
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 22:48:05 +08:00
be383cf30d
dhcp ipam: truncate client id to 254 bytes
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 22:41:05 +08:00
6d1f71e55a
dhcp ipam: print error correctly without format string
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 22:40:44 +08:00
24259e7d21
dhcp ipam: using full config to regular the code
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-10-02 22:40:19 +08:00
c16cff9805
Allow setting sysctls on a particular interface
...
Signed-off-by: Piotr Skamruk <piotr.skamruk@gmail.com >
2021-10-01 18:09:40 +02:00
7cb3453c36
dhcp: remove implemented TODO
...
Signed-off-by: SilverBut <SilverBut@users.noreply.github.com >
2021-09-30 13:10:45 +00:00
2a9114d1af
Merge pull request #665 from edef1c/filepath-clean
...
Don't redundantly filepath.Clean the output of filepath.Join
2021-09-29 10:35:48 -05:00
2c46a72680
Merge pull request #664 from edef1c/rand-read
...
Use crypto/rand.Read, not crypto.Reader.Read
2021-09-22 09:08:01 -07:00
ceb34eb2e6
Don't redundantly filepath.Clean the output of filepath.Join
...
filepath.Join is already specified to clean its output,
and the implementation indeed does so.
Signed-off-by: edef <edef@edef.eu >
2021-09-17 14:12:46 +00:00
90c018566c
Use crypto/rand.Read, not crypto.Reader.Read
...
The current code accidentally ignores partial reads, since it doesn't
check the return value of (io.Reader).Read.
What we actually want is io.ReadFull(rand.Reader, buf), which is
conveniently provided by rand.Read(buf).
Signed-off-by: edef <edef@edef.eu >
2021-09-17 13:30:14 +00:00
a6b5412c55
Merge pull request #638 from maiqueb/fix-confusing-error-msg-invalid-cidr
...
Fix confusing error msg invalid cidr
2021-09-16 17:47:05 +08:00
081ed44a1d
bridge: Add macspoofchk support
...
The new macspoofchk field is added to the bridge plugin to support
anti-mac-spoofing.
When the parameter is enabled, traffic is limited to the mac addresses
of the container interface (the veth peer that is placed in the
container ns).
Any traffic that exits the pod is checked against the source mac address
that is expected. If the mac address is different, the frames are
dropped.
The implementation is using nftables and should only be used on nodes
that support it.
Signed-off-by: Edward Haas <edwardh@redhat.com >
2021-09-14 12:46:15 +03:00
189d0c06aa
Merge pull request #661 from squeed/firewall-version
...
plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
2021-09-07 09:24:23 -05:00
ba48f8a659
plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
...
Signed-off-by: Casey Callendrello <cdc@redhat.com >
2021-09-07 15:48:16 +02:00
62952ffdac
vendor: bump to libcni v1.0.1
...
Signed-off-by: Casey Callendrello <cdc@redhat.com >
2021-09-07 15:43:54 +02:00
8ab23366fb
static ipam: do not parse the CIDR twice
...
With this patch, when the IPs are provisioned via CNI args or via
`RuntimeConfig` the CIDR is only parsed once.
Signed-off-by: Miguel Duarte Barroso <mdbarroso@redhat.com >
2021-08-24 13:19:37 +02:00
2052c30acd
static ipam: improve error msgs when provisioning invalid CIDR
...
This commit addresses the scenarios when the invalid CIDR is
provisioned via:
- CNI_ARGS
- RuntimeConfig
Signed-off-by: Miguel Duarte Barroso <mdbarroso@redhat.com >
2021-08-24 13:05:44 +02:00
8632ace977
Merge pull request #649 from squeed/libcni-1.0
...
libcni v1.0 bumps, dependency updates
2021-08-11 17:39:33 +02:00
156e59ccd1
bump go to 1.16, other misc fixes
...
- add selinux relabling to release.sh
- use same go version in root
Signed-off-by: Casey Callendrello <cdc@redhat.com >
2021-08-11 17:26:35 +02:00
0818512c7a
vendor: bump all direct dependencies
...
Just good hygiene.
Signed-off-by: Casey Callendrello <cdc@redhat.com >
2021-08-10 14:55:43 +02:00
9b1666d489
vendor: bump to libcni v1.0
...
Signed-off-by: Casey Callendrello <cdc@redhat.com >
2021-08-10 14:55:43 +02:00
7995c2d934
Merge pull request #651 from tnir/tnir/bridge/promiscuous
...
bridge: Fix typo in error message for promiscuous mode
2021-08-10 14:55:21 +02:00
0e64b0f8c2
Merge pull request #650 from tnir/actions-badge
...
Update the CI badge from Travis CI to GitHub Actions
2021-08-10 14:42:49 +02:00
0e38a1d0c0
docs: Update the CI badge from Travis CI to GitHub Actions
...
cf. https://github.com/containernetworking/plugins/pull/555
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com >
2021-08-09 09:47:39 +00:00
24b3fbc635
bridge: Fix typo in error message for promiscuous mode
...
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com >
2021-08-09 09:46:38 +00:00
649e0181fe
Merge pull request #645 from dcbw/veth-peer-to-host-ns
...
ip: place veth peer in host namspace directly
2021-07-27 13:59:05 -05:00
a49f908168
ip: place veth peer in host namspace directly
...
Instead of moving the host side of the veth peer into the host
network namespace later, just create it in the host namespace
directly.
Signed-off-by: Dan Williams <dcbw@redhat.com >
2021-07-21 09:59:11 -05:00
f14ff6687a
Merge pull request #636 from EdDev/bridge-mac-specification
...
bridge: Add mac field to specify container iface mac
2021-06-30 10:57:09 -05:00
