Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Ddd hostPID to Daemonsets #1584

Merged
merged 2 commits into from
Dec 8, 2023

Conversation

aauren
Copy link
Collaborator

@aauren aauren commented Dec 8, 2023

Since #1582 was merged, we now rely upon having access to the host's PID namespace in order to detect which veth device a given container doing hairpinning is using. As such, we now add it to the daemonsets in the example and attempt to direct users upon certain errors.

This is needed because cloudnativelabs#1582 which was recently merged relies upon
finding the correct veth interface via /proc/<pid> which isn't available
unless kube-router is in the same process namespace.

hostPID and hostIPC was always required for DSR functionality, but now
hostPID is needed for hairpin to be available.
Direct people to a potentially missing hostPID attribute in their
kube-router deployment if they are getting a no such file or directory
message.
@aauren aauren changed the base branch from fix_add_hostPID_to_daemonsets to master December 8, 2023 22:49
@aauren aauren merged commit eb462ba into cloudnativelabs:master Dec 8, 2023
2 checks passed
@aauren
Copy link
Collaborator Author

aauren commented Jan 6, 2024

Progress towards: #1596

@aauren aauren added this to the v2.1.0 milestone Jan 12, 2024
aauren added a commit to aauren/kops that referenced this pull request Mar 31, 2024
* Update version v1.6.0 -> v2.1.0
* expose container runtime socket to kube-router
* kube-router loadbalancer controller
  * Add access / information that is needed by the load balancer
    controller in kube-router.
* add access to endpoint slices for services controller
* enable hairpin mode on kube-router
  * There are integration tests in kops that expect that hairpin
    functionality is always enabled, as such we now enable hairpin-mode
    in kube-router by default.
* enable hostPID access
  * kube-router now requires access to the host's process namespace. See
    cloudnativelabs/kube-router#1584 for more
    information.
hakman pushed a commit to hakman/kops that referenced this pull request Apr 1, 2024
* Update version v1.6.0 -> v2.1.0
* expose container runtime socket to kube-router
* kube-router loadbalancer controller
  * Add access / information that is needed by the load balancer
    controller in kube-router.
* add access to endpoint slices for services controller
* enable hairpin mode on kube-router
  * There are integration tests in kops that expect that hairpin
    functionality is always enabled, as such we now enable hairpin-mode
    in kube-router by default.
* enable hostPID access
  * kube-router now requires access to the host's process namespace. See
    cloudnativelabs/kube-router#1584 for more
    information.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant