Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BPF] when host IPs change kube-proxy replaces only Syncer #8313

Merged

Conversation

tomastigera
Copy link
Contributor

@tomastigera tomastigera commented Dec 12, 2023

Restarting the whole proxy is an overkill, only the syncer eed the set of host IPs. Also the health check servers created by kube-proxy frontend are not easily carried over and thus restarting kube-proxy cannot restart the health checks.

As a side-effect, the "restart" logic in kube-proxy is much simpler as we do no tneed to stop that much.

fixes #8112

Description

Related issues/PRs

Todos

  • Tests
  • Documentation
  • Release note

Release Note

ebpf: fixed leakage of nodeport healthcheck servers

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

  • docs-pr-required: This change requires a change to the documentation that has not been completed yet.
  • docs-completed: This change has all necessary documentation completed.
  • docs-not-required: This change has no user-facing impact and requires no docs.

Every PR needs one release-note-* label.

  • release-note-required: This PR has user-facing changes. Most PRs should have this label.
  • release-note-not-required: This PR has no user-facing changes.

Other optional labels:

  • cherry-pick-candidate: This PR should be cherry-picked to an earlier release. For bug fixes only.
  • needs-operator-pr: This PR is related to install and requires a corresponding change to the operator.

@tomastigera tomastigera requested a review from a team as a code owner December 12, 2023 00:41
@marvin-tigera marvin-tigera added this to the Calico v3.28.0 milestone Dec 12, 2023
@marvin-tigera marvin-tigera added release-note-required Change has user-facing impact (no matter how small) docs-pr-required Change is not yet documented labels Dec 12, 2023
@tomastigera tomastigera removed the docs-pr-required Change is not yet documented label Dec 12, 2023
@marvin-tigera marvin-tigera added the docs-pr-required Change is not yet documented label Dec 12, 2023
@tomastigera tomastigera added docs-not-required Docs not required for this change cherry-pick-candidate and removed docs-pr-required Change is not yet documented labels Dec 12, 2023
@tomastigera tomastigera changed the title [BPF] when host IP change kube-proxy replaces only Syncer [BPF] when host IPs change kube-proxy replaces only Syncer Dec 12, 2023
@tomastigera tomastigera force-pushed the tomas-bpf-proxy-healthz branch 3 times, most recently from d70043a to 78500ef Compare December 13, 2023 18:50
Restarting the whole proxy is an overkill, only the syncer eed the set
of host IPs. Also the health check servers created by kube-proxy
frontend are not easily carried over and thus restarting kube-proxy
cannot restart the health checks.

As a side-effect, the "restart" logic in kube-proxy is much simpler as
we do no tneed to stop that much.
@tomastigera tomastigera force-pushed the tomas-bpf-proxy-healthz branch from 78500ef to b95dea0 Compare December 13, 2023 21:42
Copy link
Member

@sridhartigera sridhartigera left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tomastigera tomastigera merged commit 1c29421 into projectcalico:master Dec 14, 2023
2 checks passed
tomastigera added a commit that referenced this pull request Jan 31, 2024
…v3.27

[release-v3.27] Auto pick #8313: when host IP change kube-proxy replaces only Syncer
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs-not-required Docs not required for this change release-note-required Change has user-facing impact (no matter how small)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

HealtCheck NodePort servers leak when kube-proxy gets restarted due to host IP update
3 participants