8000 v1.9 backports 2022-06-13 by nebril · Pull Request #20180 · cilium/cilium · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

v1.9 backports 2022-06-13 #20180

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 17, 2022
Merged

Conversation

nebril
Copy link
Member
@nebril nebril commented Jun 13, 2022

PRs skipped due conflicts:

Once this PR is merged, you can update the PR labels via:

$ for pr in 19925 19522; do contrib/backporting/set-labels.py $pr done 1.9; done

or with

$ make add-label BRANCH=v1.9 ISSUES=19925,19522

@nebril nebril requested a review from a team as a code owner June 13, 2022 11:05
@nebril nebril requested review from christarazi and aditighag June 13, 2022 11:05
@maintainer-s-little-helper maintainer-s-little-helper bot added backport/1.9 kind/backports This PR provides functionality previously merged into master. labels Jun 13, 2022
@nebril
Copy link
Member Author
nebril commented Jun 13, 2022

/test-backport-1.9

christarazi and others added 2 commits June 15, 2022 16:35
[ upstream commit f439177 ]

This commit fixes a bug where the keys of the forward map inside the DNS
cache were never removed, causing the map to grow forever. By contrast,
the reverse map keys were being deleted.

For both the forward and reverse maps (which are both maps whose values
are another map), the inner map keys were being deleted.

In other words, the delete on the outer map key was missing for the
forward map.

In addition to fixing the bug, this commit expands the unit test
coverage to assert after any deletes (entries expiring or GC) that the
forward and reverse maps contain what we expect.

Particularly, in an environment where there are many unique DNS lookups
(unique FQDNs) being done, this forward map could grow quite large over
time, especially for a long-lived workload (endpoint). This fixes this
memory-leak-like bug.

Fixes: cf387ce ("fqdn: Introduce TTL-aware cache for DNS retention")
Fixes: f6ce522 ("FQDN: Added garbage collector functions.")

Signed-off-by: Chris Tarazi <chris@isovalent.com>
Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
[ upstream commit 4bcd7d2 ]

When a service matcher LRP and the selected backend pods
are deployed first, we previously didn't check if the LRP
frontend information (aka clusterIP) is available. This led to agent panic.
The frontend information is populated only when the LRP selected
service event is received.
This issue won't be hit when the selected service was deployed
prior to the LRP or backend pod.

Reported-by: Karsten Nielsen
Signed-off-by: Aditi Ghag <aditi@cilium.io>
Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
Signed-off-by: Paul Chaignon <paul@cilium.io>
@pchaigno pchaigno force-pushed the pr/v1.9-backport-2022-06-13 branch from 4929538 to 79d2c68 Compare June 15, 2022 14:38
@pchaigno pchaigno requested a review from aditighag June 15, 2022 14:38
@pchaigno
Copy link
Member
pchaigno commented Jun 15, 2022

/test-backport-1.9

Job 'Cilium-PR-K8s-1.17-kernel-4.9' failed:

Click to show.

Test Name

K8sHubbleTest Hubble Observe Test L3/L4 Flow

Failure Output

FAIL: Failed waiting for log-gatherer pods: timed out waiting for pods with filter -l k8s-app=cilium-test-logs to be ready: 4m0s timeout expired

If it is a flake and a GitHub issue doesn't already exist to track it, comment /mlh new-flake Cilium-PR-K8s-1.17-kernel-4.9 so I can create one.

Job 'Cilium-PR-Runtime-4.9' failed:

Click to show.

Test Name

RuntimePrivilegedUnitTests Run Tests

Failure Output

FAIL: Failed to run privileged unit tests

If it is a flake and a GitHub issue doesn't already exist to track it, comment /mlh new-flake Cilium-PR-Runtime-4.9 so I can create one.

Copy link
Member
@aditighag aditighag left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM Thanks!

@kkourt
Copy link
Contributor
kkourt commented Jun 16, 2022

/test-1.17-4.9

edit: all tests seem to have failed at an early stage (https://jenkins.cilium.io/job/Cilium-PR-K8s-1.17-kernel-4.9/737/testReport/) so running tests again.

@kkourt
Copy link
Contributor
kkourt commented Jun 16, 2022

Job 'Cilium-PR-Runtime-4.9' failed:

This fails on:

FAIL: proxy_test.go:381: DNSProxyTestSuite.TestRespondViaCorrectProtocol

Will try to see if I can reproduce locally.

@kkourt
Copy link
Contributor
kkourt commented Jun 16, 2022

/test-runtime-4.9

Was not able to reproduce the same failure locally. So retrying.

@kkourt
Copy link
Contributor
kkourt commented Jun 17, 2022

We have ACKs from authors, tests are green, marking as ready to merge.

@kkourt kkourt added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Jun 17, 2022
@kkourt kkourt merged commit dbc486d into cilium:v1.9 Jun 17, 2022
@pchaigno
Copy link
Member

Should we file an issue for the new Runtime flake?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/backports This PR provides functionality previously merged into master. ready-to-merge This PR has passed all tests and received consensus from code owners to merge.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants
0