github.com/fafucoder/cilium@v1.6.11/contrib/packaging/deb/debian/changelog (about) 1 cilium (0.9.90) UNRELEASED; urgency=medium 2 3 [ root ] 4 * Initial release. (Closes: #XXXXXX) 5 6 [ Thomas Graf ] 7 * Prepare development branch after release 8 * k8s: Specify ClusterRoleBinding group 9 * cilium: Print component status message 10 * k8s/rbac: Grant access to componentstatues 11 12 [ Dan Wendlandt ] 13 * Minor formatting and graphic fixes for k8s getting started guide 14 15 [ André Martins ] 16 * cni: ommiting errors for endpoint not found on DEL 17 * cni: setting net.ipv6.conf.all.disable_ipv6=0 18 19 [ Thomas Graf ] 20 * k8s: Use existing `10-cilium.conf` CNI configuration if it exists 21 * proxy: Create access log file if it does not exist 22 23 [ John Fastabend ] 24 * cilium: include versions in clang/kernel version error report 25 26 [ peiqi ] 27 * renew cilium policy setup script in examples 28 29 [ John Fastabend ] 30 * cilium: push version info into debug logs of epbf join 31 * cilium: data 32 33 [ Eloy Coto ] 34 * Monitor: omiting panic when no events Fix #757 35 36 [ Jarno Rajahalme ] 37 * tests: Show which test is running. 38 * bpf: Add probe for LPM trie map type. 39 * bpf: More rigorous bpf map probes. 40 * policy: Add L3 rule validation and unit tests. 41 * bpf: Support L3/IP access policy. 42 * pkg/maps: Add support for flags in map creation. 43 * pkg/maps: Add new cidrmap. 44 * pkg/policy: Add L3 support. 45 46 [ André Martins ] 47 * policy: fix index out of range for MatchExpressions 48 49 [ Alexander Alemayhu ] 50 * tests: make link check ready for vagrant 51 * Vagrantfile: add dependencies for building the docs 52 * Documentation: add bpf updates 05 53 54 [ John Fastabend ] 55 * bpf: multiple ports in the policy causes compilation failure 56 * cilium: merge ingress and egress proxy tests 57 * cilium: add tests for with multiple l4 port maps 58 * cilium: bindata 59 60 [ Eloy Coto ] 61 * BPF init: Check that cilium is present on the path fix #742 #743 62 63 [ Steven Ceuppens ] 64 * cilium: Move common/config.go to pkg/option/config.go - fix #760 65 66 [ Thomas Graf ] 67 * Update AUTHORS 68 * Documentation: Provide installation instructions for key-value store 69 * labels: Support regular expressions in label filters 70 71 [ Sergey Generalov ] 72 * New Cilium diagrams for the main README 73 74 [ Steven Ceuppens ] 75 * cilium: Change Consumable LabelList to LabelArray - fix #838 76 77 [ Thomas Graf ] 78 * k8s: Move pkg/k8s/types into pkg/k8s 79 * labels: Move label source definition into labels package 80 * labels: Rework of label source 81 * Documentation: Provide documentation on labels 82 83 [ Alexander Alemayhu ] 84 * Makefile: add test target for applying changes 85 * Vagrantfile: install go-bindata (Closes: #859) 86 * cilium: fix outdated bindata 87 88 [ Thomas Graf ] 89 * Documentation: Add option to edit /etc/fstab 90 91 [ Ian Vernon ] 92 * tests: add K8s getting-started-guide test 93 94 [ Michi Mutsuzaki ] 95 * Fix L7 policy in the getting started guide 96 97 [ Thomas Graf ] 98 * Documentation: Document behaviour for existing pods 99 * Documentation: Document minimal version of kubectl for ThirdPartyResources 100 101 [ Jon Davies ] 102 * cilium-ds.yaml: Added health checks to consul pods. 103 104 [ André Martins ] 105 * tests: add no-pager flag to journalctl 106 107 [ Thomas Graf ] 108 * k8s: Ignore headless services 109 110 [ André Martins ] 111 * plugins: fix add endpoint panic for len IDs less 5 112 113 [ Thomas Graf ] 114 * README refresher 115 116 [ Madhu Challa ] 117 * bpf: Encapsulation support for standalone loadbalancer 118 119 [ Thomas Graf ] 120 * bpf: Disable rp_filter on cilium_host 121 * bpf: Update bindata 122 * Documentation: Improve CNI configuration section 123 124 [ Ian Vernon ] 125 * daemon: update policy enforcement w/ no endpoints 126 127 [ Thomas Graf ] 128 * Force doc rebuild 129 * Revert "bpf: Update bindata" 130 * Revert "bpf: Disable rp_filter on cilium_host" 131 * Revert "bpf: Encapsulation support for standalone loadbalancer" 132 133 [ Ian Vernon ] 134 * daemon: fix log message for kvstore opt 135 136 [ André Martins ] 137 * etcd: checking for etcd version 138 * Godeps: adding etcd version packages 139 * Revert "etcd: checking for etcd version" 140 * Revert "Godeps: adding etcd version packages" 141 142 [ Tobias Klauser ] 143 * Documentation: update cilium version to 0.9.0 in admin guide 144 145 [ Alexander Alemayhu ] 146 * Vagrantfile: install pip by default 147 * Revert "tests: make link check ready for vagrant" 148 149 [ Thomas Graf ] 150 * bpf: Update bindata.go with go-bindata + go-1.8.3 151 * tests: Disable go 1.8.3 specific unit test for now 152 153 [ shijunqian ] 154 * Documentation: fix clerical error 155 156 [ Eloy Coto ] 157 * CMD - service list command refactoring Fix #744 158 159 [ André Martins ] 160 * forcely setting UTC for Time.Now() 161 162 [ Alexander Alemayhu ] 163 * bpf/Makefile: add target for analyzing files 164 165 [ Ian Vernon ] 166 * tests/k8s/Vagrantfile: reset kubeadm before init 167 * Vagrantfile: use different intnet per build 168 169 [ Alexander Alemayhu ] 170 * tests: add separate script for pulling in docker images 171 172 [ André Martins ] 173 * etcd: checking for etcd version 174 * Godeps: adding go-version from hashicorp 175 176 [ Thomas Graf ] 177 * proxy: Extended logging of requests 178 * k8s: Add unit test for default deny rule 179 180 [ Alexander Alemayhu ] 181 * daemon: use endpoint specific error in endpoint TriggerPolicyUpdates 182 (Closes: #677) 183 184 [ Thomas Graf ] 185 * vendor: Update vendor/github.com/vishvananda/netlink/ 186 187 [ Ian Vernon ] 188 * daemon: default to empty string for key-value store 189 190 [ Daniel Borkmann ] 191 * cilium: add CiliumIPv6 StringNoZeroComp handler 192 193 [ Thomas Graf ] 194 * proxy: Log record format improvements 195 * Documentation: Remove demo_docs as they trigger doc build errors 196 * Documentation: Fix broken reference 197 * kvstore: Move all code to pkg/kvstore and add singleton client 198 199 [ André Martins ] 200 * examples: update kubernetes example 201 202 [ Alexander Alemayhu ] 203 * Documentation: add blank lines after listing item 204 205 [ Thomas Graf ] 206 * endpoint: Factor our endpoint management into pkg/endpoint 207 * nodeaddress: Move node address code into own package 208 * proxy: Provide source and destination endpoint information as available 209 210 [ Alexander Alemayhu ] 211 * tests: reduce sleep calls 212 213 [ Jonathan Davies ] 214 * cilium-ds.yaml: Added healthchecks for cilium pods. 215 216 [ Thomas Graf ] 217 * AUTHORS: Add recent new authors 218 219 [ Alexander Alemayhu ] 220 * Documentation: minor nitpicks and rewording 221 * Documentation: use git to set version info 222 223 [ André Martins ] 224 * kvstore: fix race conditions in GetWatchers 225 226 [ Thomas Graf ] 227 * proxy: Provide correct source endpoint ID 228 * daemon: When BPF generation fails, log each output line separate warning 229 * logging: Disable formatter to have simple format in TTY 230 * daemon: Turn unnecessary info messages into debugging messages 231 232 [ Tobias Klauser ] 233 * daemon: remove unnecessary cgo integration 234 235 [ Thomas Graf ] 236 * proxy: Fix race when looking up endpoint metadata 237 238 [ John Fastabend ] 239 * cilium: proxy uses incorrect daddr when services are used 240 * cilium: bindata 241 242 [ Tobias Klauser ] 243 * pkg/bpf: remove unnecessary cgo integration 244 * pkg/bpf: add wrapper constants for bpf map types and flags 245 246 [ Alexander Alemayhu ] 247 * daemon: remove bindata from git 248 * contrib: add script for checking bindata 249 * daemon: track go version used for bindata updates 250 * daemon: only use tracked files in go-bindata 251 * Dockerfile: make adjustments now that bindata.go is gone 252 253 [ André Martins ] 254 * kvstore: erroring out with the default kvstore IPs 255 * retrieving K8s PodCIDR from k8s-apiserver 256 257 [ Ian Vernon ] 258 * tests: gather /var/run/cilium, /var/lib/cilium as part of Jenkins builds 259 260 [ Ross Guarino ] 261 * docs(architecture): use /64 cluster prefix 262 263 [ Amre Shakimov ] 264 * add support for CNI 0.2.x spec 265 266 [ André Martins ] 267 * packaging: add .git to the list of files to copy 268 * packaging: add scripts directory to the list of files to copy 269 * tests: changed docker build to make docker-image 270 * Vagrantfiles: excluding packaging docker/stage for rsync 271 * Moved make clean from docker/Makefile to Dockerfile 272 273 [ John Fastabend ] 274 * cilium: add test for lb + proxy 275 276 [ Thomas Graf ] 277 * bindata: Remove auto commit on apply 278 * bindata: Store SHA and version in daemon/bpf.sha 279 280 [ André Martins ] 281 * add bindata.go to the list of ignore files 282 * daemon: reoder flags and enhanced flags description 283 284 [ craigbox ] 285 * Update gettingstarted.rst for minikube 0.20 286 287 [ Thomas Graf ] 288 * bpf: Only create conntrack entries for TCP SYN packets 289 290 [ André Martins ] 291 * tests: add multinode k8s tests 292 * Jenkins: enabled k8s multi-node tests on jenkins 293 * tests: changing VMs conflicting IPs 294 295 [ Tobias Klauser ] 296 * Fix broken links to Kubernetes docs 297 * pkg/bpf: get and store owner program type for maps 298 299 [ Amre Shakimov ] 300 * fix include in Makefile 301 302 [ André Martins ] 303 * daemon: returning clearer k8s error messages 304 * Godeps: updating etcd client 305 * etcd: make necessary changes for etcd 3.2.1 306 307 [ Amre Shakimov ] 308 * use \$(RM) instead of rm for cleaning 309 310 [ Dan Wendlandt ] 311 * Fix K8s typo in main README 312 313 [ André Martins ] 314 * k8s: removing verbose debug message 315 316 [ Tobias Klauser ] 317 * pkg/bpf: explicitly include stdint.h 318 319 [ André Martins ] 320 * tests: restoring bash trace in helpers 321 322 [ Thomas Graf ] 323 * tests: Wait for endpoints to become available before invoking netperf 324 * tests: copy_files should never fail 325 * k8s-tests: Use files of local git tree 326 327 [ Alexander Alemayhu ] 328 * cmd: add description for cilium command (Closes: #1049) 329 330 [ Thomas Graf ] 331 * tests/k8s: Make k8s-gsg-test.sh error out on failure 332 * tests/k8s: Fix path to Kubernetes example files 333 * tests/k8s: Increase memory to 2GB 334 * tests/k8s: Use existing helper scripts to wait for state changes 335 * Vagrantfile: Do not inherit DNS server of host 336 * kubernetes: Add scheduler tolerations to schedule Cilium on NotReady nodes 337 338 [ Alexander Alemayhu ] 339 * cmd, model: add verbose field to IdentityContext (Closes: #693) 340 341 [ Tobias Klauser ] 342 * pkg/bpf: use ClockGettime from x/sys/unix instead of C wrapper 343 344 [ André Martins ] 345 * Vagrantfile: use build IDs as part of VMs names 346 347 [ Thomas Graf ] 348 * nodeaddress: Retrieve hostname if available 349 * tests: Move documentation checks to the end 350 * Dockerfile: Include bpf-map tool in container image 351 * Vagrantfile: Include bpf-map tool in developer vagrant box 352 353 [ André Martins ] 354 * ct: add aliend_id in ct maps 355 * CT: cleaning entries when new policy denies them 356 357 [ Amre Shakimov ] 358 * tools: fix Makefile for docker 359 360 [ Thomas Graf ] 361 * node: Split EndpointsCIDR into IPv4 and IPv6 field 362 * bpf: Add NonPersistent flag to force removal of map on startup 363 * bpf: Simplified encapsulation mode 364 * cli: Command to print contents of local tunnel endpoint map 365 * daemon: Use real node address of host 366 * node: Populate local node in tunnel endpoint map 367 * lxcmap: Support migration of map format 368 * agent: Add --ipv6-range to set per node IPv6 allocation prefix 369 * vagrant: Use --ipv6-range to set per node prefix 370 * agent: Print IPv4/IPv6 node IPs when starting up 371 * agent: Provide options to overwrite IPv4/IPv6 node address 372 * agent: Derive real IPv6 node adress and split router address 373 * tests/lb: Do not rely on cilium_host having a global scope addres 374 * tests/proxy: Show return http codes 375 * agent: Masquerade IPv4 packets which leave the host 376 * bpf: Delay opening of maps to after mount 377 * tests/k8s: Adjust k8s multi node to new multi node mode 378 * agent: Add --ipv4-cluster-cidr-mask-size option 379 * nodeaddress: Validate that cluster prefix is great then node alloc prefix 380 * cni: Install cni loopback driver if not installed already 381 382 [ Ian Vernon ] 383 * tests: pick up k8s test logs, other enhancements 384 385 [ Michi Mutsuzaki ] 386 * Refactor k8s.Client 387 388 [ André Martins ] 389 * k8s: change daemon's k8s clientSet to Interface 390 * k8s: add node IP CIDR in the annotations node 391 392 [ Daniel Dao ] 393 * move from godeps to https://github.com/LK4D4/vndr 394 395 [ Thomas Graf ] 396 * k8s: Correctly implement ClusterIP for type NodePort and LoadBalancer 397 398 [ Daniel Dao ] 399 * vendor.conf: update etcd to 3.2.1 400 * remove unused dependencies detected by vndr 401 * remove Godeps manifest since we moved to vndr 402 403 [ Thomas Graf ] 404 * examples/demo: Clean up star wars demo 405 406 [ Alexander Alemayhu ] 407 * tests: check printed container ids 408 * pkg: introduce new package for handling byteorder 409 * bpf: don't call bpf_htonl for LXC_IPV4 410 * byteorder: add documentation file for byteorder package (Closes: #285, 16) 411 412 [ Tobias Klauser ] 413 * pkg/bpf: add new sock ops prog type 414 415 [ André Martins ] 416 * K8s: keeping namespace label set in cilium NP 417 * tests: adding l7 stresstest on different namespaces 418 * tests: ignoring .json files in 00-no-sleep.sh 419 * Jenkinsfile: add timestamps to builds 420 * endpointmanager: fixed remove locked for DockerEndpointID 421 422 [ Eloy Coto ] 423 * [BPF/probes]: Added kernel checks Fixes: #891 424 425 [ André Martins ] 426 * k8s: implemented CiliumNetworkPolicy multi rule 427 * tests: add one more example to tests multi CNP enforcement 428 * tests: adding nodeselector for bookinfo spec 429 430 [ Ian Vernon ] 431 * Documentation: add CoreOS getting-started-guide 432 433 [ Thomas Graf ] 434 * tests: Disable CT cleanup tests for now 435 * policy: Introduce policy repository revision 436 * api: Return policy revision via API 437 * api: Regenerate API code 438 * agent/client: Report policy revision via API and print in CLI 439 * agent: Report repository revision as endpoint policy build 440 * cilium: New 'cilium policy wait <revison>` command 441 * tests: Add helpers to wait for all endpoints to run a policy revision 442 * Makefile: run etcd 3.1.0 for unit tests 443 * vagrant: Fail if cilium.service fails and print log 444 445 [ Thomas Bachman ] 446 * Fix typo in demo1.sh 447 448 [ Thomas Graf ] 449 * find-llvm.sh: Add fast track for common location 450 * bpf: Support encapsulation for packets received from a netdev 451 * daemon: Add options to specify service CIDR 452 * daemon: Point cluster CIDR to cilium_host in encapsulation mode 453 * daemon: Automatically reserve conflicting local IPv4 routes in alloc prefix 454 * proxy: Provide original identity as SO_MARK 455 * bpf: Add additional debugging for bpf_netdev 456 * bpf: Compile bpf_host.o after ENCAP_IFINDEX has been derived 457 * agent: Masquerade traffic from host into cilium cluster 458 * bpf: Support reaching the local node from the overlay 459 * bpf: Store source identity in proxy map 460 * proxy: Inherit endpoint source identity from proxy map 461 * bpf: Attach bpf_host.o at egress of cilium_host 462 * tests: Fix 06-lb.sh 463 * bpf: Redirect to HOST_IFINDEX when doing proxy redirect 464 * tests: Remove multinode L7 tests workaround 465 466 [ Ian Vernon ] 467 * cmd: add output options for cilium monitor 468 469 [ Thomas Graf ] 470 * bpf: Provide identity in capture messages 471 * bpfdebug: Improve DumpInfo() output 472 * monitor: Decode layers unless disabled 473 * monitor: Print separator between messages in non-info mode 474 * bpf: Do not require DEBUG flag to emit basic tracing messages 475 * bpf: Make tracing capture len configurable 476 477 [ Ian Vernon ] 478 * pkg/bpfdebug: fix errant c/p in DumpInfo func desc 479 480 [ Amre Shakimov ] 481 * cilium-cni: move labels to ep 482 * cni-plugin: pass through labels during ep creation 483 484 [ Alexander Alemayhu ] 485 * git: ignore more files 486 * cmd: replace some of the placeholders with short descriptions 487 * daemon: remove dead monitor code 488 * pkg/byteorder: use Swap{16,32} in NetworkToHost 489 * tests: fix typo 490 491 [ Thomas Graf ] 492 * monitor: Fix message separator output 493 * labels: Include source in sortedList() 494 495 [ Daniel Dao ] 496 * fix overflow of arguments array 497 498 [ André Martins ] 499 * daemon: cleaning up leftover veths 500 501 [ Daniel Borkmann ] 502 * cilium: remove stale id also from policy map 503 * cilium: also remove cilium_calls maps 504 505 [ André Martins ] 506 * Updating list of AUTHORS 507 508 [ Amre Shakimov ] 509 * fix kvstore arg for docker-compose example 510 511 [ André Martins ] 512 * tests: add k8s multi node to stress the L7 proxy 513 514 [ Ian Vernon ] 515 * tests: only change permissions of created logs dir 516 517 [ Amre Shakimov ] 518 * remove tmp debug file 519 520 [ Eloy Coto ] 521 * [Packaging] Fix deb packages build 522 523 [ Thomas Graf ] 524 * Prepare development branch after release 525 * k8s: Specify ClusterRoleBinding group 526 * cilium: Print component status message 527 * k8s/rbac: Grant access to componentstatues 528 529 [ Dan Wendlandt ] 530 * Minor formatting and graphic fixes for k8s getting started guide 531 532 [ André Martins ] 533 * cni: ommiting errors for endpoint not found on DEL 534 * cni: setting net.ipv6.conf.all.disable_ipv6=0 535 536 [ Thomas Graf ] 537 * k8s: Use existing `10-cilium.conf` CNI configuration if it exists 538 * proxy: Create access log file if it does not exist 539 540 [ John Fastabend ] 541 * cilium: include versions in clang/kernel version error report 542 543 [ peiqi ] 544 * renew cilium policy setup script in examples 545 546 [ John Fastabend ] 547 * cilium: push version info into debug logs of epbf join 548 549 [ Thomas Graf ] 550 * Prepare development branch after release 551 * k8s: Specify ClusterRoleBinding group 552 * cilium: Print component status message 553 * k8s/rbac: Grant access to componentstatues 554 555 [ Dan Wendlandt ] 556 * Minor formatting and graphic fixes for k8s getting started guide 557 558 [ André Martins ] 559 * cni: ommiting errors for endpoint not found on DEL 560 * cni: setting net.ipv6.conf.all.disable_ipv6=0 561 562 [ Thomas Graf ] 563 * k8s: Use existing `10-cilium.conf` CNI configuration if it exists 564 * proxy: Create access log file if it does not exist 565 566 [ John Fastabend ] 567 * cilium: include versions in clang/kernel version error report 568 569 [ peiqi ] 570 * renew cilium policy setup script in examples 571 572 [ John Fastabend ] 573 * cilium: push version info into debug logs of epbf join 574 * cilium: data 575 576 [ Eloy Coto ] 577 * Monitor: omiting panic when no events Fix #757 578 579 [ Jarno Rajahalme ] 580 * tests: Show which test is running. 581 * bpf: Add probe for LPM trie map type. 582 * bpf: More rigorous bpf map probes. 583 * policy: Add L3 rule validation and unit tests. 584 * bpf: Support L3/IP access policy. 585 * pkg/maps: Add support for flags in map creation. 586 * pkg/maps: Add new cidrmap. 587 * pkg/policy: Add L3 support. 588 589 [ André Martins ] 590 * policy: fix index out of range for MatchExpressions 591 592 [ Alexander Alemayhu ] 593 * tests: make link check ready for vagrant 594 * Vagrantfile: add dependencies for building the docs 595 * Documentation: add bpf updates 05 596 597 [ John Fastabend ] 598 * bpf: multiple ports in the policy causes compilation failure 599 * cilium: merge ingress and egress proxy tests 600 * cilium: add tests for with multiple l4 port maps 601 * cilium: bindata 602 603 [ Eloy Coto ] 604 * BPF init: Check that cilium is present on the path fix #742 #743 605 606 [ Steven Ceuppens ] 607 * cilium: Move common/config.go to pkg/option/config.go - fix #760 608 609 [ Thomas Graf ] 610 * Update AUTHORS 611 * Documentation: Provide installation instructions for key-value store 612 * labels: Support regular expressions in label filters 613 614 [ Sergey Generalov ] 615 * New Cilium diagrams for the main README 616 617 [ Steven Ceuppens ] 618 * cilium: Change Consumable LabelList to LabelArray - fix #838 619 620 [ Thomas Graf ] 621 * k8s: Move pkg/k8s/types into pkg/k8s 622 * labels: Move label source definition into labels package 623 * labels: Rework of label source 624 * Documentation: Provide documentation on labels 625 626 [ Alexander Alemayhu ] 627 * Makefile: add test target for applying changes 628 * Vagrantfile: install go-bindata (Closes: #859) 629 * cilium: fix outdated bindata 630 631 [ Thomas Graf ] 632 * Documentation: Add option to edit /etc/fstab 633 634 [ Ian Vernon ] 635 * tests: add K8s getting-started-guide test 636 637 [ Michi Mutsuzaki ] 638 * Fix L7 policy in the getting started guide 639 640 [ Thomas Graf ] 641 * Documentation: Document behaviour for existing pods 642 * Documentation: Document minimal version of kubectl for ThirdPartyResources 643 644 [ Jon Davies ] 645 * cilium-ds.yaml: Added health checks to consul pods. 646 647 [ André Martins ] 648 * tests: add no-pager flag to journalctl 649 650 [ Thomas Graf ] 651 * k8s: Ignore headless services 652 653 [ André Martins ] 654 * plugins: fix add endpoint panic for len IDs less 5 655 656 [ Thomas Graf ] 657 * README refresher 658 659 [ Madhu Challa ] 660 * bpf: Encapsulation support for standalone loadbalancer 661 662 [ Thomas Graf ] 663 * bpf: Disable rp_filter on cilium_host 664 * bpf: Update bindata 665 * Documentation: Improve CNI configuration section 666 667 [ Ian Vernon ] 668 * daemon: update policy enforcement w/ no endpoints 669 670 [ Thomas Graf ] 671 * Force doc rebuild 672 * Revert "bpf: Update bindata" 673 * Revert "bpf: Disable rp_filter on cilium_host" 674 * Revert "bpf: Encapsulation support for standalone loadbalancer" 675 676 [ Ian Vernon ] 677 * daemon: fix log message for kvstore opt 678 679 [ André Martins ] 680 * etcd: checking for etcd version 681 * Godeps: adding etcd version packages 682 * Revert "etcd: checking for etcd version" 683 * Revert "Godeps: adding etcd version packages" 684 685 [ Tobias Klauser ] 686 * Documentation: update cilium version to 0.9.0 in admin guide 687 688 [ Alexander Alemayhu ] 689 * Vagrantfile: install pip by default 690 * Revert "tests: make link check ready for vagrant" 691 692 [ Thomas Graf ] 693 * bpf: Update bindata.go with go-bindata + go-1.8.3 694 * tests: Disable go 1.8.3 specific unit test for now 695 696 [ shijunqian ] 697 * Documentation: fix clerical error 698 699 [ Eloy Coto ] 700 * CMD - service list command refactoring Fix #744 701 702 [ André Martins ] 703 * forcely setting UTC for Time.Now() 704 705 [ Alexander Alemayhu ] 706 * bpf/Makefile: add target for analyzing files 707 708 [ Ian Vernon ] 709 * tests/k8s/Vagrantfile: reset kubeadm before init 710 * Vagrantfile: use different intnet per build 711 712 [ Alexander Alemayhu ] 713 * tests: add separate script for pulling in docker images 714 715 [ André Martins ] 716 * etcd: checking for etcd version 717 * Godeps: adding go-version from hashicorp 718 719 [ Thomas Graf ] 720 * proxy: Extended logging of requests 721 * k8s: Add unit test for default deny rule 722 723 [ Alexander Alemayhu ] 724 * daemon: use endpoint specific error in endpoint TriggerPolicyUpdates 725 (Closes: #677) 726 727 [ Thomas Graf ] 728 * vendor: Update vendor/github.com/vishvananda/netlink/ 729 730 [ Ian Vernon ] 731 * daemon: default to empty string for key-value store 732 733 [ Daniel Borkmann ] 734 * cilium: add CiliumIPv6 StringNoZeroComp handler 735 736 [ Thomas Graf ] 737 * proxy: Log record format improvements 738 * Documentation: Remove demo_docs as they trigger doc build errors 739 * Documentation: Fix broken reference 740 * kvstore: Move all code to pkg/kvstore and add singleton client 741 742 [ André Martins ] 743 * examples: update kubernetes example 744 745 [ Alexander Alemayhu ] 746 * Documentation: add blank lines after listing item 747 748 [ Thomas Graf ] 749 * endpoint: Factor our endpoint management into pkg/endpoint 750 * nodeaddress: Move node address code into own package 751 * proxy: Provide source and destination endpoint information as available 752 753 [ Alexander Alemayhu ] 754 * tests: reduce sleep calls 755 756 [ Jonathan Davies ] 757 * cilium-ds.yaml: Added healthchecks for cilium pods. 758 759 [ Thomas Graf ] 760 * AUTHORS: Add recent new authors 761 762 [ Alexander Alemayhu ] 763 * Documentation: minor nitpicks and rewording 764 * Documentation: use git to set version info 765 766 [ André Martins ] 767 * kvstore: fix race conditions in GetWatchers 768 769 [ Thomas Graf ] 770 * proxy: Provide correct source endpoint ID 771 * daemon: When BPF generation fails, log each output line separate warning 772 * logging: Disable formatter to have simple format in TTY 773 * daemon: Turn unnecessary info messages into debugging messages 774 775 [ Tobias Klauser ] 776 * daemon: remove unnecessary cgo integration 777 778 [ Thomas Graf ] 779 * proxy: Fix race when looking up endpoint metadata 780 781 [ John Fastabend ] 782 * cilium: proxy uses incorrect daddr when services are used 783 * cilium: bindata 784 785 [ Tobias Klauser ] 786 * pkg/bpf: remove unnecessary cgo integration 787 * pkg/bpf: add wrapper constants for bpf map types and flags 788 789 [ Alexander Alemayhu ] 790 * daemon: remove bindata from git 791 * contrib: add script for checking bindata 792 * daemon: track go version used for bindata updates 793 * daemon: only use tracked files in go-bindata 794 * Dockerfile: make adjustments now that bindata.go is gone 795 796 [ André Martins ] 797 * kvstore: erroring out with the default kvstore IPs 798 * retrieving K8s PodCIDR from k8s-apiserver 799 800 [ Ian Vernon ] 801 * tests: gather /var/run/cilium, /var/lib/cilium as part of Jenkins builds 802 803 [ Ross Guarino ] 804 * docs(architecture): use /64 cluster prefix 805 806 [ Amre Shakimov ] 807 * add support for CNI 0.2.x spec 808 809 [ André Martins ] 810 * packaging: add .git to the list of files to copy 811 * packaging: add scripts directory to the list of files to copy 812 * tests: changed docker build to make docker-image 813 * Vagrantfiles: excluding packaging docker/stage for rsync 814 * Moved make clean from docker/Makefile to Dockerfile 815 816 [ John Fastabend ] 817 * cilium: add test for lb + proxy 818 819 [ Thomas Graf ] 820 * bindata: Remove auto commit on apply 821 * bindata: Store SHA and version in daemon/bpf.sha 822 823 [ André Martins ] 824 * add bindata.go to the list of ignore files 825 * daemon: reoder flags and enhanced flags description 826 827 [ craigbox ] 828 * Update gettingstarted.rst for minikube 0.20 829 830 [ Thomas Graf ] 831 * bpf: Only create conntrack entries for TCP SYN packets 832 833 [ André Martins ] 834 * tests: add multinode k8s tests 835 * Jenkins: enabled k8s multi-node tests on jenkins 836 * tests: changing VMs conflicting IPs 837 838 [ Tobias Klauser ] 839 * Fix broken links to Kubernetes docs 840 * pkg/bpf: get and store owner program type for maps 841 842 [ Amre Shakimov ] 843 * fix include in Makefile 844 845 [ André Martins ] 846 * daemon: returning clearer k8s error messages 847 * Godeps: updating etcd client 848 * etcd: make necessary changes for etcd 3.2.1 849 850 [ Amre Shakimov ] 851 * use \$(RM) instead of rm for cleaning 852 853 [ Dan Wendlandt ] 854 * Fix K8s typo in main README 855 856 [ André Martins ] 857 * k8s: removing verbose debug message 858 859 [ Tobias Klauser ] 860 * pkg/bpf: explicitly include stdint.h 861 862 [ André Martins ] 863 * tests: restoring bash trace in helpers 864 865 [ Thomas Graf ] 866 * tests: Wait for endpoints to become available before invoking netperf 867 * tests: copy_files should never fail 868 * k8s-tests: Use files of local git tree 869 870 [ Alexander Alemayhu ] 871 * cmd: add description for cilium command (Closes: #1049) 872 873 [ Thomas Graf ] 874 * tests/k8s: Make k8s-gsg-test.sh error out on failure 875 * tests/k8s: Fix path to Kubernetes example files 876 * tests/k8s: Increase memory to 2GB 877 * tests/k8s: Use existing helper scripts to wait for state changes 878 * Vagrantfile: Do not inherit DNS server of host 879 * kubernetes: Add scheduler tolerations to schedule Cilium on NotReady nodes 880 881 [ Alexander Alemayhu ] 882 * cmd, model: add verbose field to IdentityContext (Closes: #693) 883 884 [ Tobias Klauser ] 885 * pkg/bpf: use ClockGettime from x/sys/unix instead of C wrapper 886 887 [ André Martins ] 888 * Vagrantfile: use build IDs as part of VMs names 889 890 [ Thomas Graf ] 891 * nodeaddress: Retrieve hostname if available 892 * tests: Move documentation checks to the end 893 * Dockerfile: Include bpf-map tool in container image 894 * Vagrantfile: Include bpf-map tool in developer vagrant box 895 896 [ André Martins ] 897 * ct: add aliend_id in ct maps 898 * CT: cleaning entries when new policy denies them 899 900 [ Amre Shakimov ] 901 * tools: fix Makefile for docker 902 903 [ Thomas Graf ] 904 * node: Split EndpointsCIDR into IPv4 and IPv6 field 905 * bpf: Add NonPersistent flag to force removal of map on startup 906 * bpf: Simplified encapsulation mode 907 * cli: Command to print contents of local tunnel endpoint map 908 * daemon: Use real node address of host 909 * node: Populate local node in tunnel endpoint map 910 * lxcmap: Support migration of map format 911 * agent: Add --ipv6-range to set per node IPv6 allocation prefix 912 * vagrant: Use --ipv6-range to set per node prefix 913 * agent: Print IPv4/IPv6 node IPs when starting up 914 * agent: Provide options to overwrite IPv4/IPv6 node address 915 * agent: Derive real IPv6 node adress and split router address 916 * tests/lb: Do not rely on cilium_host having a global scope addres 917 * tests/proxy: Show return http codes 918 * agent: Masquerade IPv4 packets which leave the host 919 * bpf: Delay opening of maps to after mount 920 * tests/k8s: Adjust k8s multi node to new multi node mode 921 * agent: Add --ipv4-cluster-cidr-mask-size option 922 * nodeaddress: Validate that cluster prefix is great then node alloc prefix 923 * cni: Install cni loopback driver if not installed already 924 925 [ Ian Vernon ] 926 * tests: pick up k8s test logs, other enhancements 927 928 [ Michi Mutsuzaki ] 929 * Refactor k8s.Client 930 931 [ André Martins ] 932 * k8s: change daemon's k8s clientSet to Interface 933 * k8s: add node IP CIDR in the annotations node 934 935 [ Daniel Dao ] 936 * move from godeps to https://github.com/LK4D4/vndr 937 938 [ Thomas Graf ] 939 * k8s: Correctly implement ClusterIP for type NodePort and LoadBalancer 940 941 [ Daniel Dao ] 942 * vendor.conf: update etcd to 3.2.1 943 * remove unused dependencies detected by vndr 944 * remove Godeps manifest since we moved to vndr 945 946 [ Thomas Graf ] 947 * examples/demo: Clean up star wars demo 948 949 [ Alexander Alemayhu ] 950 * tests: check printed container ids 951 * pkg: introduce new package for handling byteorder 952 * bpf: don't call bpf_htonl for LXC_IPV4 953 * byteorder: add documentation file for byteorder package (Closes: #285, 16) 954 955 [ Tobias Klauser ] 956 * pkg/bpf: add new sock ops prog type 957 958 [ André Martins ] 959 * K8s: keeping namespace label set in cilium NP 960 * tests: adding l7 stresstest on different namespaces 961 * tests: ignoring .json files in 00-no-sleep.sh 962 * Jenkinsfile: add timestamps to builds 963 * endpointmanager: fixed remove locked for DockerEndpointID 964 965 [ Eloy Coto ] 966 * [BPF/probes]: Added kernel checks Fixes: #891 967 968 [ André Martins ] 969 * k8s: implemented CiliumNetworkPolicy multi rule 970 * tests: add one more example to tests multi CNP enforcement 971 * tests: adding nodeselector for bookinfo spec 972 973 [ Ian Vernon ] 974 * Documentation: add CoreOS getting-started-guide 975 976 [ Thomas Graf ] 977 * tests: Disable CT cleanup tests for now 978 * policy: Introduce policy repository revision 979 * api: Return policy revision via API 980 * api: Regenerate API code 981 * agent/client: Report policy revision via API and print in CLI 982 * agent: Report repository revision as endpoint policy build 983 * cilium: New 'cilium policy wait <revison>` command 984 * tests: Add helpers to wait for all endpoints to run a policy revision 985 * Makefile: run etcd 3.1.0 for unit tests 986 * vagrant: Fail if cilium.service fails and print log 987 988 [ Thomas Bachman ] 989 * Fix typo in demo1.sh 990 991 [ Thomas Graf ] 992 * find-llvm.sh: Add fast track for common location 993 * bpf: Support encapsulation for packets received from a netdev 994 * daemon: Add options to specify service CIDR 995 * daemon: Point cluster CIDR to cilium_host in encapsulation mode 996 * daemon: Automatically reserve conflicting local IPv4 routes in alloc prefix 997 * proxy: Provide original identity as SO_MARK 998 * bpf: Add additional debugging for bpf_netdev 999 * bpf: Compile bpf_host.o after ENCAP_IFINDEX has been derived 1000 * agent: Masquerade traffic from host into cilium cluster 1001 * bpf: Support reaching the local node from the overlay 1002 * bpf: Store source identity in proxy map 1003 * proxy: Inherit endpoint source identity from proxy map 1004 * bpf: Attach bpf_host.o at egress of cilium_host 1005 * tests: Fix 06-lb.sh 1006 * bpf: Redirect to HOST_IFINDEX when doing proxy redirect 1007 * tests: Remove multinode L7 tests workaround 1008 1009 [ Ian Vernon ] 1010 * cmd: add output options for cilium monitor 1011 1012 [ Thomas Graf ] 1013 * bpf: Provide identity in capture messages 1014 * bpfdebug: Improve DumpInfo() output 1015 * monitor: Decode layers unless disabled 1016 * monitor: Print separator between messages in non-info mode 1017 * bpf: Do not require DEBUG flag to emit basic tracing messages 1018 * bpf: Make tracing capture len configurable 1019 1020 [ Ian Vernon ] 1021 * pkg/bpfdebug: fix errant c/p in DumpInfo func desc 1022 1023 [ Amre Shakimov ] 1024 * cilium-cni: move labels to ep 1025 * cni-plugin: pass through labels during ep creation 1026 1027 [ Alexander Alemayhu ] 1028 * git: ignore more files 1029 * cmd: replace some of the placeholders with short descriptions 1030 * daemon: remove dead monitor code 1031 * pkg/byteorder: use Swap{16,32} in NetworkToHost 1032 * tests: fix typo 1033 1034 [ Thomas Graf ] 1035 * monitor: Fix message separator output 1036 * labels: Include source in sortedList() 1037 1038 [ Daniel Dao ] 1039 * fix overflow of arguments array 1040 1041 [ André Martins ] 1042 * daemon: cleaning up leftover veths 1043 1044 [ Daniel Borkmann ] 1045 * cilium: remove stale id also from policy map 1046 * cilium: also remove cilium_calls maps 1047 1048 [ André Martins ] 1049 * Updating list of AUTHORS 1050 1051 [ Amre Shakimov ] 1052 * fix kvstore arg for docker-compose example 1053 1054 [ André Martins ] 1055 * tests: add k8s multi node to stress the L7 proxy 1056 1057 [ Ian Vernon ] 1058 * tests: only change permissions of created logs dir 1059 1060 [ Amre Shakimov ] 1061 * remove tmp debug file 1062 1063 [ Eloy Coto ] 1064 * [Packaging] Fix deb packages build 1065 1066 [ Thomas Graf ] 1067 * Prepare development branch after release 1068 * k8s: Specify ClusterRoleBinding group 1069 * cilium: Print component status message 1070 * k8s/rbac: Grant access to componentstatues 1071 1072 [ Dan Wendlandt ] 1073 * Minor formatting and graphic fixes for k8s getting started guide 1074 1075 [ Thomas Graf ] 1076 * Prepare development branch after release 1077 * k8s: Specify ClusterRoleBinding group 1078 * cilium: Print component status message 1079 * k8s/rbac: Grant access to componentstatues 1080 1081 [ Dan Wendlandt ] 1082 * Minor formatting and graphic fixes for k8s getting started guide 1083 1084 [ André Martins ] 1085 * cni: ommiting errors for endpoint not found on DEL 1086 * cni: setting net.ipv6.conf.all.disable_ipv6=0 1087 1088 [ Thomas Graf ] 1089 * k8s: Use existing `10-cilium.conf` CNI configuration if it exists 1090 * proxy: Create access log file if it does not exist 1091 1092 [ John Fastabend ] 1093 * cilium: include versions in clang/kernel version error report 1094 1095 [ peiqi ] 1096 * renew cilium policy setup script in examples 1097 1098 [ John Fastabend ] 1099 * cilium: push version info into debug logs of epbf join 1100 * cilium: data 1101 1102 [ Eloy Coto ] 1103 * Monitor: omiting panic when no events Fix #757 1104 1105 [ Jarno Rajahalme ] 1106 * tests: Show which test is running. 1107 * bpf: Add probe for LPM trie map type. 1108 * bpf: More rigorous bpf map probes. 1109 * policy: Add L3 rule validation and unit tests. 1110 * bpf: Support L3/IP access policy. 1111 * pkg/maps: Add support for flags in map creation. 1112 * pkg/maps: Add new cidrmap. 1113 * pkg/policy: Add L3 support. 1114 1115 [ André Martins ] 1116 * policy: fix index out of range for MatchExpressions 1117 1118 [ Alexander Alemayhu ] 1119 * tests: make link check ready for vagrant 1120 * Vagrantfile: add dependencies for building the docs 1121 * Documentation: add bpf updates 05 1122 1123 [ John Fastabend ] 1124 * bpf: multiple ports in the policy causes compilation failure 1125 * cilium: merge ingress and egress proxy tests 1126 * cilium: add tests for with multiple l4 port maps 1127 * cilium: bindata 1128 1129 [ Eloy Coto ] 1130 * BPF init: Check that cilium is present on the path fix #742 #743 1131 1132 [ Steven Ceuppens ] 1133 * cilium: Move common/config.go to pkg/option/config.go - fix #760 1134 1135 [ Thomas Graf ] 1136 * Update AUTHORS 1137 * Documentation: Provide installation instructions for key-value store 1138 * labels: Support regular expressions in label filters 1139 1140 [ Sergey Generalov ] 1141 * New Cilium diagrams for the main README 1142 1143 [ Steven Ceuppens ] 1144 * cilium: Change Consumable LabelList to LabelArray - fix #838 1145 1146 [ Thomas Graf ] 1147 * k8s: Move pkg/k8s/types into pkg/k8s 1148 * labels: Move label source definition into labels package 1149 * labels: Rework of label source 1150 * Documentation: Provide documentation on labels 1151 1152 [ Alexander Alemayhu ] 1153 * Makefile: add test target for applying changes 1154 * Vagrantfile: install go-bindata (Closes: #859) 1155 * cilium: fix outdated bindata 1156 1157 [ Thomas Graf ] 1158 * Documentation: Add option to edit /etc/fstab 1159 1160 [ Ian Vernon ] 1161 * tests: add K8s getting-started-guide test 1162 1163 [ Michi Mutsuzaki ] 1164 * Fix L7 policy in the getting started guide 1165 1166 [ Thomas Graf ] 1167 * Documentation: Document behaviour for existing pods 1168 * Documentation: Document minimal version of kubectl for ThirdPartyResources 1169 1170 [ Jon Davies ] 1171 * cilium-ds.yaml: Added health checks to consul pods. 1172 1173 [ André Martins ] 1174 * tests: add no-pager flag to journalctl 1175 1176 [ Thomas Graf ] 1177 * k8s: Ignore headless services 1178 1179 [ André Martins ] 1180 * plugins: fix add endpoint panic for len IDs less 5 1181 1182 [ Thomas Graf ] 1183 * README refresher 1184 1185 [ Madhu Challa ] 1186 * bpf: Encapsulation support for standalone loadbalancer 1187 1188 [ Thomas Graf ] 1189 * bpf: Disable rp_filter on cilium_host 1190 * bpf: Update bindata 1191 * Documentation: Improve CNI configuration section 1192 1193 [ Ian Vernon ] 1194 * daemon: update policy enforcement w/ no endpoints 1195 1196 [ Thomas Graf ] 1197 * Force doc rebuild 1198 * Revert "bpf: Update bindata" 1199 * Revert "bpf: Disable rp_filter on cilium_host" 1200 * Revert "bpf: Encapsulation support for standalone loadbalancer" 1201 1202 [ Ian Vernon ] 1203 * daemon: fix log message for kvstore opt 1204 1205 [ André Martins ] 1206 * etcd: checking for etcd version 1207 * Godeps: adding etcd version packages 1208 * Revert "etcd: checking for etcd version" 1209 * Revert "Godeps: adding etcd version packages" 1210 1211 [ Tobias Klauser ] 1212 * Documentation: update cilium version to 0.9.0 in admin guide 1213 1214 [ Alexander Alemayhu ] 1215 * Vagrantfile: install pip by default 1216 * Revert "tests: make link check ready for vagrant" 1217 1218 [ Thomas Graf ] 1219 * bpf: Update bindata.go with go-bindata + go-1.8.3 1220 * tests: Disable go 1.8.3 specific unit test for now 1221 1222 [ shijunqian ] 1223 * Documentation: fix clerical error 1224 1225 [ Eloy Coto ] 1226 * CMD - service list command refactoring Fix #744 1227 1228 [ André Martins ] 1229 * forcely setting UTC for Time.Now() 1230 1231 [ Alexander Alemayhu ] 1232 * bpf/Makefile: add target for analyzing files 1233 1234 [ Ian Vernon ] 1235 * tests/k8s/Vagrantfile: reset kubeadm before init 1236 * Vagrantfile: use different intnet per build 1237 1238 [ Alexander Alemayhu ] 1239 * tests: add separate script for pulling in docker images 1240 1241 [ André Martins ] 1242 * etcd: checking for etcd version 1243 * Godeps: adding go-version from hashicorp 1244 1245 [ Thomas Graf ] 1246 * proxy: Extended logging of requests 1247 * k8s: Add unit test for default deny rule 1248 1249 [ Alexander Alemayhu ] 1250 * daemon: use endpoint specific error in endpoint TriggerPolicyUpdates 1251 (Closes: #677) 1252 1253 [ Thomas Graf ] 1254 * vendor: Update vendor/github.com/vishvananda/netlink/ 1255 1256 [ Ian Vernon ] 1257 * daemon: default to empty string for key-value store 1258 1259 [ Daniel Borkmann ] 1260 * cilium: add CiliumIPv6 StringNoZeroComp handler 1261 1262 [ Thomas Graf ] 1263 * proxy: Log record format improvements 1264 * Documentation: Remove demo_docs as they trigger doc build errors 1265 * Documentation: Fix broken reference 1266 * kvstore: Move all code to pkg/kvstore and add singleton client 1267 1268 [ André Martins ] 1269 * examples: update kubernetes example 1270 1271 [ Alexander Alemayhu ] 1272 * Documentation: add blank lines after listing item 1273 1274 [ Thomas Graf ] 1275 * endpoint: Factor our endpoint management into pkg/endpoint 1276 * nodeaddress: Move node address code into own package 1277 * proxy: Provide source and destination endpoint information as available 1278 1279 [ Alexander Alemayhu ] 1280 * tests: reduce sleep calls 1281 1282 [ Jonathan Davies ] 1283 * cilium-ds.yaml: Added healthchecks for cilium pods. 1284 1285 [ Thomas Graf ] 1286 * AUTHORS: Add recent new authors 1287 1288 [ Alexander Alemayhu ] 1289 * Documentation: minor nitpicks and rewording 1290 * Documentation: use git to set version info 1291 1292 [ André Martins ] 1293 * kvstore: fix race conditions in GetWatchers 1294 1295 [ Thomas Graf ] 1296 * proxy: Provide correct source endpoint ID 1297 * daemon: When BPF generation fails, log each output line separate warning 1298 * logging: Disable formatter to have simple format in TTY 1299 * daemon: Turn unnecessary info messages into debugging messages 1300 1301 [ Tobias Klauser ] 1302 * daemon: remove unnecessary cgo integration 1303 1304 [ Thomas Graf ] 1305 * proxy: Fix race when looking up endpoint metadata 1306 1307 [ John Fastabend ] 1308 * cilium: proxy uses incorrect daddr when services are used 1309 * cilium: bindata 1310 1311 [ Tobias Klauser ] 1312 * pkg/bpf: remove unnecessary cgo integration 1313 * pkg/bpf: add wrapper constants for bpf map types and flags 1314 1315 [ Alexander Alemayhu ] 1316 * daemon: remove bindata from git 1317 * contrib: add script for checking bindata 1318 * daemon: track go version used for bindata updates 1319 * daemon: only use tracked files in go-bindata 1320 * Dockerfile: make adjustments now that bindata.go is gone 1321 1322 [ André Martins ] 1323 * kvstore: erroring out with the default kvstore IPs 1324 * retrieving K8s PodCIDR from k8s-apiserver 1325 1326 [ Ian Vernon ] 1327 * tests: gather /var/run/cilium, /var/lib/cilium as part of Jenkins builds 1328 1329 [ Ross Guarino ] 1330 * docs(architecture): use /64 cluster prefix 1331 1332 [ Amre Shakimov ] 1333 * add support for CNI 0.2.x spec 1334 1335 [ André Martins ] 1336 * packaging: add .git to the list of files to copy 1337 * packaging: add scripts directory to the list of files to copy 1338 * tests: changed docker build to make docker-image 1339 * Vagrantfiles: excluding packaging docker/stage for rsync 1340 * Moved make clean from docker/Makefile to Dockerfile 1341 1342 [ John Fastabend ] 1343 * cilium: add test for lb + proxy 1344 1345 [ Thomas Graf ] 1346 * bindata: Remove auto commit on apply 1347 * bindata: Store SHA and version in daemon/bpf.sha 1348 1349 [ André Martins ] 1350 * add bindata.go to the list of ignore files 1351 * daemon: reoder flags and enhanced flags description 1352 1353 [ craigbox ] 1354 * Update gettingstarted.rst for minikube 0.20 1355 1356 [ Thomas Graf ] 1357 * bpf: Only create conntrack entries for TCP SYN packets 1358 1359 [ André Martins ] 1360 * tests: add multinode k8s tests 1361 * Jenkins: enabled k8s multi-node tests on jenkins 1362 * tests: changing VMs conflicting IPs 1363 1364 [ Tobias Klauser ] 1365 * Fix broken links to Kubernetes docs 1366 * pkg/bpf: get and store owner program type for maps 1367 1368 [ Amre Shakimov ] 1369 * fix include in Makefile 1370 1371 [ André Martins ] 1372 * daemon: returning clearer k8s error messages 1373 * Godeps: updating etcd client 1374 * etcd: make necessary changes for etcd 3.2.1 1375 1376 [ Amre Shakimov ] 1377 * use \$(RM) instead of rm for cleaning 1378 1379 [ Dan Wendlandt ] 1380 * Fix K8s typo in main README 1381 1382 [ André Martins ] 1383 * k8s: removing verbose debug message 1384 1385 [ Tobias Klauser ] 1386 * pkg/bpf: explicitly include stdint.h 1387 1388 [ André Martins ] 1389 * tests: restoring bash trace in helpers 1390 1391 [ Thomas Graf ] 1392 * tests: Wait for endpoints to become available before invoking netperf 1393 * tests: copy_files should never fail 1394 * k8s-tests: Use files of local git tree 1395 1396 [ Alexander Alemayhu ] 1397 * cmd: add description for cilium command (Closes: #1049) 1398 1399 [ Thomas Graf ] 1400 * tests/k8s: Make k8s-gsg-test.sh error out on failure 1401 * tests/k8s: Fix path to Kubernetes example files 1402 * tests/k8s: Increase memory to 2GB 1403 * tests/k8s: Use existing helper scripts to wait for state changes 1404 * Vagrantfile: Do not inherit DNS server of host 1405 * kubernetes: Add scheduler tolerations to schedule Cilium on NotReady nodes 1406 1407 [ Alexander Alemayhu ] 1408 * cmd, model: add verbose field to IdentityContext (Closes: #693) 1409 1410 [ Tobias Klauser ] 1411 * pkg/bpf: use ClockGettime from x/sys/unix instead of C wrapper 1412 1413 [ André Martins ] 1414 * Vagrantfile: use build IDs as part of VMs names 1415 1416 [ Thomas Graf ] 1417 * nodeaddress: Retrieve hostname if available 1418 * tests: Move documentation checks to the end 1419 * Dockerfile: Include bpf-map tool in container image 1420 * Vagrantfile: Include bpf-map tool in developer vagrant box 1421 1422 [ André Martins ] 1423 * ct: add aliend_id in ct maps 1424 * CT: cleaning entries when new policy denies them 1425 1426 [ Amre Shakimov ] 1427 * tools: fix Makefile for docker 1428 1429 [ Thomas Graf ] 1430 * node: Split EndpointsCIDR into IPv4 and IPv6 field 1431 * bpf: Add NonPersistent flag to force removal of map on startup 1432 * bpf: Simplified encapsulation mode 1433 * cli: Command to print contents of local tunnel endpoint map 1434 * daemon: Use real node address of host 1435 * node: Populate local node in tunnel endpoint map 1436 * lxcmap: Support migration of map format 1437 * agent: Add --ipv6-range to set per node IPv6 allocation prefix 1438 * vagrant: Use --ipv6-range to set per node prefix 1439 * agent: Print IPv4/IPv6 node IPs when starting up 1440 * agent: Provide options to overwrite IPv4/IPv6 node address 1441 * agent: Derive real IPv6 node adress and split router address 1442 * tests/lb: Do not rely on cilium_host having a global scope addres 1443 * tests/proxy: Show return http codes 1444 * agent: Masquerade IPv4 packets which leave the host 1445 * bpf: Delay opening of maps to after mount 1446 * tests/k8s: Adjust k8s multi node to new multi node mode 1447 * agent: Add --ipv4-cluster-cidr-mask-size option 1448 * nodeaddress: Validate that cluster prefix is great then node alloc prefix 1449 * cni: Install cni loopback driver if not installed already 1450 1451 [ Ian Vernon ] 1452 * tests: pick up k8s test logs, other enhancements 1453 1454 [ Michi Mutsuzaki ] 1455 * Refactor k8s.Client 1456 1457 [ André Martins ] 1458 * k8s: change daemon's k8s clientSet to Interface 1459 * k8s: add node IP CIDR in the annotations node 1460 1461 [ Daniel Dao ] 1462 * move from godeps to https://github.com/LK4D4/vndr 1463 1464 [ Thomas Graf ] 1465 * k8s: Correctly implement ClusterIP for type NodePort and LoadBalancer 1466 1467 [ Daniel Dao ] 1468 * vendor.conf: update etcd to 3.2.1 1469 * remove unused dependencies detected by vndr 1470 * remove Godeps manifest since we moved to vndr 1471 1472 [ Thomas Graf ] 1473 * examples/demo: Clean up star wars demo 1474 1475 [ Alexander Alemayhu ] 1476 * tests: check printed container ids 1477 * pkg: introduce new package for handling byteorder 1478 * bpf: don't call bpf_htonl for LXC_IPV4 1479 * byteorder: add documentation file for byteorder package (Closes: #285, 16) 1480 1481 [ Tobias Klauser ] 1482 * pkg/bpf: add new sock ops prog type 1483 1484 [ André Martins ] 1485 * K8s: keeping namespace label set in cilium NP 1486 * tests: adding l7 stresstest on different namespaces 1487 * tests: ignoring .json files in 00-no-sleep.sh 1488 * Jenkinsfile: add timestamps to builds 1489 * endpointmanager: fixed remove locked for DockerEndpointID 1490 1491 [ Eloy Coto ] 1492 * [BPF/probes]: Added kernel checks Fixes: #891 1493 1494 [ André Martins ] 1495 * k8s: implemented CiliumNetworkPolicy multi rule 1496 * tests: add one more example to tests multi CNP enforcement 1497 * tests: adding nodeselector for bookinfo spec 1498 1499 [ Ian Vernon ] 1500 * Documentation: add CoreOS getting-started-guide 1501 1502 [ Thomas Graf ] 1503 * tests: Disable CT cleanup tests for now 1504 * policy: Introduce policy repository revision 1505 * api: Return policy revision via API 1506 * api: Regenerate API code 1507 * agent/client: Report policy revision via API and print in CLI 1508 * agent: Report repository revision as endpoint policy build 1509 * cilium: New 'cilium policy wait <revison>` command 1510 * tests: Add helpers to wait for all endpoints to run a policy revision 1511 * Makefile: run etcd 3.1.0 for unit tests 1512 * vagrant: Fail if cilium.service fails and print log 1513 1514 [ Thomas Bachman ] 1515 * Fix typo in demo1.sh 1516 1517 [ Thomas Graf ] 1518 * find-llvm.sh: Add fast track for common location 1519 * bpf: Support encapsulation for packets received from a netdev 1520 * daemon: Add options to specify service CIDR 1521 * daemon: Point cluster CIDR to cilium_host in encapsulation mode 1522 * daemon: Automatically reserve conflicting local IPv4 routes in alloc prefix 1523 * proxy: Provide original identity as SO_MARK 1524 * bpf: Add additional debugging for bpf_netdev 1525 * bpf: Compile bpf_host.o after ENCAP_IFINDEX has been derived 1526 * agent: Masquerade traffic from host into cilium cluster 1527 * bpf: Support reaching the local node from the overlay 1528 * bpf: Store source identity in proxy map 1529 * proxy: Inherit endpoint source identity from proxy map 1530 * bpf: Attach bpf_host.o at egress of cilium_host 1531 * tests: Fix 06-lb.sh 1532 * bpf: Redirect to HOST_IFINDEX when doing proxy redirect 1533 * tests: Remove multinode L7 tests workaround 1534 1535 [ Ian Vernon ] 1536 * cmd: add output options for cilium monitor 1537 1538 [ Thomas Graf ] 1539 * bpf: Provide identity in capture messages 1540 * bpfdebug: Improve DumpInfo() output 1541 * monitor: Decode layers unless disabled 1542 * monitor: Print separator between messages in non-info mode 1543 * bpf: Do not require DEBUG flag to emit basic tracing messages 1544 * bpf: Make tracing capture len configurable 1545 1546 [ Ian Vernon ] 1547 * pkg/bpfdebug: fix errant c/p in DumpInfo func desc 1548 1549 [ Amre Shakimov ] 1550 * cilium-cni: move labels to ep 1551 * cni-plugin: pass through labels during ep creation 1552 1553 [ Alexander Alemayhu ] 1554 * git: ignore more files 1555 * cmd: replace some of the placeholders with short descriptions 1556 * daemon: remove dead monitor code 1557 * pkg/byteorder: use Swap{16,32} in NetworkToHost 1558 * tests: fix typo 1559 1560 [ Thomas Graf ] 1561 * monitor: Fix message separator output 1562 * labels: Include source in sortedList() 1563 1564 [ Daniel Dao ] 1565 * fix overflow of arguments array 1566 1567 [ André Martins ] 1568 * daemon: cleaning up leftover veths 1569 1570 [ Daniel Borkmann ] 1571 * cilium: remove stale id also from policy map 1572 * cilium: also remove cilium_calls maps 1573 1574 [ André Martins ] 1575 * Updating list of AUTHORS 1576 1577 [ Amre Shakimov ] 1578 * fix kvstore arg for docker-compose example 1579 1580 [ André Martins ] 1581 * tests: add k8s multi node to stress the L7 proxy 1582 1583 [ Ian Vernon ] 1584 * tests: only change permissions of created logs dir 1585 1586 [ Amre Shakimov ] 1587 * remove tmp debug file 1588 1589 [ Eloy Coto ] 1590 * [Packaging] Fix deb packages build 1591 1592 [ Thomas Graf ] 1593 * Prepare development branch after release 1594 * k8s: Specify ClusterRoleBinding group 1595 * cilium: Print component status message 1596 * k8s/rbac: Grant access to componentstatues 1597 * Prepare development branch after release 1598 * k8s: Specify ClusterRoleBinding group 1599 * cilium: Print component status message 1600 * k8s/rbac: Grant access to componentstatues 1601 1602 [ Dan Wendlandt ] 1603 * Minor formatting and graphic fixes for k8s getting started guide 1604 1605 [ André Martins ] 1606 * cni: ommiting errors for endpoint not found on DEL 1607 * cni: setting net.ipv6.conf.all.disable_ipv6=0 1608 1609 [ Thomas Graf ] 1610 * k8s: Use existing `10-cilium.conf` CNI configuration if it exists 1611 * proxy: Create access log file if it does not exist 1612 1613 [ John Fastabend ] 1614 * cilium: include versions in clang/kernel version error report 1615 1616 [ peiqi ] 1617 * renew cilium policy setup script in examples 1618 1619 [ John Fastabend ] 1620 * cilium: push version info into debug logs of epbf join 1621 * cilium: data 1622 1623 [ Eloy Coto ] 1624 * Monitor: omiting panic when no events Fix #757 1625 1626 [ Jarno Rajahalme ] 1627 * tests: Show which test is running. 1628 * bpf: Add probe for LPM trie map type. 1629 * bpf: More rigorous bpf map probes. 1630 * policy: Add L3 rule validation and unit tests. 1631 * bpf: Support L3/IP access policy. 1632 * pkg/maps: Add support for flags in map creation. 1633 * pkg/maps: Add new cidrmap. 1634 * pkg/policy: Add L3 support. 1635 1636 [ André Martins ] 1637 * policy: fix index out of range for MatchExpressions 1638 1639 [ Alexander Alemayhu ] 1640 * tests: make link check ready for vagrant 1641 * Vagrantfile: add dependencies for building the docs 1642 * Documentation: add bpf updates 05 1643 1644 [ John Fastabend ] 1645 * bpf: multiple ports in the policy causes compilation failure 1646 * cilium: merge ingress and egress proxy tests 1647 * cilium: add tests for with multiple l4 port maps 1648 * cilium: bindata 1649 1650 [ Eloy Coto ] 1651 * BPF init: Check that cilium is present on the path fix #742 #743 1652 1653 [ Steven Ceuppens ] 1654 * cilium: Move common/config.go to pkg/option/config.go - fix #760 1655 1656 [ Thomas Graf ] 1657 * Update AUTHORS 1658 * Documentation: Provide installation instructions for key-value store 1659 * labels: Support regular expressions in label filters 1660 1661 [ Sergey Generalov ] 1662 * New Cilium diagrams for the main README 1663 1664 [ Steven Ceuppens ] 1665 * cilium: Change Consumable LabelList to LabelArray - fix #838 1666 1667 [ Thomas Graf ] 1668 * k8s: Move pkg/k8s/types into pkg/k8s 1669 * labels: Move label source definition into labels package 1670 * labels: Rework of label source 1671 * Documentation: Provide documentation on labels 1672 1673 [ Alexander Alemayhu ] 1674 * Makefile: add test target for applying changes 1675 * Vagrantfile: install go-bindata (Closes: #859) 1676 * cilium: fix outdated bindata 1677 1678 [ Thomas Graf ] 1679 * Documentation: Add option to edit /etc/fstab 1680 1681 [ Ian Vernon ] 1682 * tests: add K8s getting-started-guide test 1683 1684 [ Michi Mutsuzaki ] 1685 * Fix L7 policy in the getting started guide 1686 1687 [ Thomas Graf ] 1688 * Documentation: Document behaviour for existing pods 1689 * Documentation: Document minimal version of kubectl for ThirdPartyResources 1690 1691 [ Jon Davies ] 1692 * cilium-ds.yaml: Added health checks to consul pods. 1693 1694 [ André Martins ] 1695 * tests: add no-pager flag to journalctl 1696 1697 [ Thomas Graf ] 1698 * k8s: Ignore headless services 1699 1700 [ André Martins ] 1701 * plugins: fix add endpoint panic for len IDs less 5 1702 1703 [ Thomas Graf ] 1704 * README refresher 1705 1706 [ Madhu Challa ] 1707 * bpf: Encapsulation support for standalone loadbalancer 1708 1709 [ Thomas Graf ] 1710 * bpf: Disable rp_filter on cilium_host 1711 * bpf: Update bindata 1712 * Documentation: Improve CNI configuration section 1713 1714 [ Ian Vernon ] 1715 * daemon: update policy enforcement w/ no endpoints 1716 1717 [ Thomas Graf ] 1718 * Force doc rebuild 1719 * Revert "bpf: Update bindata" 1720 * Revert "bpf: Disable rp_filter on cilium_host" 1721 * Revert "bpf: Encapsulation support for standalone loadbalancer" 1722 1723 [ Ian Vernon ] 1724 * daemon: fix log message for kvstore opt 1725 1726 [ André Martins ] 1727 * etcd: checking for etcd version 1728 * Godeps: adding etcd version packages 1729 * Revert "etcd: checking for etcd version" 1730 * Revert "Godeps: adding etcd version packages" 1731 1732 [ Tobias Klauser ] 1733 * Documentation: update cilium version to 0.9.0 in admin guide 1734 1735 [ Alexander Alemayhu ] 1736 * Vagrantfile: install pip by default 1737 * Revert "tests: make link check ready for vagrant" 1738 1739 [ Thomas Graf ] 1740 * bpf: Update bindata.go with go-bindata + go-1.8.3 1741 * tests: Disable go 1.8.3 specific unit test for now 1742 1743 [ shijunqian ] 1744 * Documentation: fix clerical error 1745 1746 [ Eloy Coto ] 1747 * CMD - service list command refactoring Fix #744 1748 1749 [ André Martins ] 1750 * forcely setting UTC for Time.Now() 1751 1752 [ Alexander Alemayhu ] 1753 * bpf/Makefile: add target for analyzing files 1754 1755 [ Ian Vernon ] 1756 * tests/k8s/Vagrantfile: reset kubeadm before init 1757 * Vagrantfile: use different intnet per build 1758 1759 [ Alexander Alemayhu ] 1760 * tests: add separate script for pulling in docker images 1761 1762 [ André Martins ] 1763 * etcd: checking for etcd version 1764 * Godeps: adding go-version from hashicorp 1765 1766 [ Thomas Graf ] 1767 * proxy: Extended logging of requests 1768 * k8s: Add unit test for default deny rule 1769 1770 [ Alexander Alemayhu ] 1771 * daemon: use endpoint specific error in endpoint TriggerPolicyUpdates 1772 (Closes: #677) 1773 1774 [ Thomas Graf ] 1775 * vendor: Update vendor/github.com/vishvananda/netlink/ 1776 1777 [ Ian Vernon ] 1778 * daemon: default to empty string for key-value store 1779 1780 [ Daniel Borkmann ] 1781 * cilium: add CiliumIPv6 StringNoZeroComp handler 1782 1783 [ Thomas Graf ] 1784 * proxy: Log record format improvements 1785 * Documentation: Remove demo_docs as they trigger doc build errors 1786 * Documentation: Fix broken reference 1787 * kvstore: Move all code to pkg/kvstore and add singleton client 1788 1789 [ André Martins ] 1790 * examples: update kubernetes example 1791 1792 [ Alexander Alemayhu ] 1793 * Documentation: add blank lines after listing item 1794 1795 [ Thomas Graf ] 1796 * endpoint: Factor our endpoint management into pkg/endpoint 1797 * nodeaddress: Move node address code into own package 1798 * proxy: Provide source and destination endpoint information as available 1799 1800 [ Alexander Alemayhu ] 1801 * tests: reduce sleep calls 1802 1803 [ Jonathan Davies ] 1804 * cilium-ds.yaml: Added healthchecks for cilium pods. 1805 1806 [ Thomas Graf ] 1807 * AUTHORS: Add recent new authors 1808 1809 [ Alexander Alemayhu ] 1810 * Documentation: minor nitpicks and rewording 1811 * Documentation: use git to set version info 1812 1813 [ André Martins ] 1814 * kvstore: fix race conditions in GetWatchers 1815 1816 [ Thomas Graf ] 1817 * proxy: Provide correct source endpoint ID 1818 * daemon: When BPF generation fails, log each output line separate warning 1819 * logging: Disable formatter to have simple format in TTY 1820 * daemon: Turn unnecessary info messages into debugging messages 1821 1822 [ Tobias Klauser ] 1823 * daemon: remove unnecessary cgo integration 1824 1825 [ Thomas Graf ] 1826 * proxy: Fix race when looking up endpoint metadata 1827 1828 [ John Fastabend ] 1829 * cilium: proxy uses incorrect daddr when services are used 1830 1831 [ Thomas Graf ] 1832 * Prepare development branch after release 1833 * k8s: Specify ClusterRoleBinding group 1834 * cilium: Print component status message 1835 * k8s/rbac: Grant access to componentstatues 1836 1837 [ Dan Wendlandt ] 1838 * Minor formatting and graphic fixes for k8s getting started guide 1839 1840 [ André Martins ] 1841 * cni: ommiting errors for endpoint not found on DEL 1842 * cni: setting net.ipv6.conf.all.disable_ipv6=0 1843 1844 [ Thomas Graf ] 1845 * k8s: Use existing `10-cilium.conf` CNI configuration if it exists 1846 * proxy: Create access log file if it does not exist 1847 1848 [ John Fastabend ] 1849 * cilium: include versions in clang/kernel version error report 1850 1851 [ peiqi ] 1852 * renew cilium policy setup script in examples 1853 1854 [ John Fastabend ] 1855 * cilium: push version info into debug logs of epbf join 1856 * cilium: data 1857 1858 [ Eloy Coto ] 1859 * Monitor: omiting panic when no events Fix #757 1860 1861 [ Jarno Rajahalme ] 1862 * tests: Show which test is running. 1863 * bpf: Add probe for LPM trie map type. 1864 * bpf: More rigorous bpf map probes. 1865 * policy: Add L3 rule validation and unit tests. 1866 * bpf: Support L3/IP access policy. 1867 * pkg/maps: Add support for flags in map creation. 1868 * pkg/maps: Add new cidrmap. 1869 * pkg/policy: Add L3 support. 1870 1871 [ André Martins ] 1872 * policy: fix index out of range for MatchExpressions 1873 1874 [ Alexander Alemayhu ] 1875 * tests: make link check ready for vagrant 1876 * Vagrantfile: add dependencies for building the docs 1877 * Documentation: add bpf updates 05 1878 1879 [ John Fastabend ] 1880 * bpf: multiple ports in the policy causes compilation failure 1881 * cilium: merge ingress and egress proxy tests 1882 * cilium: add tests for with multiple l4 port maps 1883 * cilium: bindata 1884 1885 [ Eloy Coto ] 1886 * BPF init: Check that cilium is present on the path fix #742 #743 1887 1888 [ Steven Ceuppens ] 1889 * cilium: Move common/config.go to pkg/option/config.go - fix #760 1890 1891 [ Thomas Graf ] 1892 * Update AUTHORS 1893 * Documentation: Provide installation instructions for key-value store 1894 * labels: Support regular expressions in label filters 1895 1896 [ Sergey Generalov ] 1897 * New Cilium diagrams for the main README 1898 1899 [ Steven Ceuppens ] 1900 * cilium: Change Consumable LabelList to LabelArray - fix #838 1901 1902 [ Thomas Graf ] 1903 * k8s: Move pkg/k8s/types into pkg/k8s 1904 * labels: Move label source definition into labels package 1905 * labels: Rework of label source 1906 * Documentation: Provide documentation on labels 1907 1908 [ Alexander Alemayhu ] 1909 * Makefile: add test target for applying changes 1910 * Vagrantfile: install go-bindata (Closes: #859) 1911 * cilium: fix outdated bindata 1912 1913 [ Thomas Graf ] 1914 * Documentation: Add option to edit /etc/fstab 1915 1916 [ Ian Vernon ] 1917 * tests: add K8s getting-started-guide test 1918 1919 [ Michi Mutsuzaki ] 1920 * Fix L7 policy in the getting started guide 1921 1922 [ Thomas Graf ] 1923 * Documentation: Document behaviour for existing pods 1924 * Documentation: Document minimal version of kubectl for ThirdPartyResources 1925 1926 [ Jon Davies ] 1927 * cilium-ds.yaml: Added health checks to consul pods. 1928 1929 [ André Martins ] 1930 * tests: add no-pager flag to journalctl 1931 1932 [ Thomas Graf ] 1933 * k8s: Ignore headless services 1934 1935 [ André Martins ] 1936 * plugins: fix add endpoint panic for len IDs less 5 1937 1938 [ Thomas Graf ] 1939 * README refresher 1940 1941 [ Madhu Challa ] 1942 * bpf: Encapsulation support for standalone loadbalancer 1943 1944 [ Thomas Graf ] 1945 * bpf: Disable rp_filter on cilium_host 1946 * bpf: Update bindata 1947 * Documentation: Improve CNI configuration section 1948 1949 [ Ian Vernon ] 1950 * daemon: update policy enforcement w/ no endpoints 1951 1952 [ Thomas Graf ] 1953 * Force doc rebuild 1954 * Revert "bpf: Update bindata" 1955 * Revert "bpf: Disable rp_filter on cilium_host" 1956 * Revert "bpf: Encapsulation support for standalone loadbalancer" 1957 1958 [ Ian Vernon ] 1959 * daemon: fix log message for kvstore opt 1960 1961 [ André Martins ] 1962 * etcd: checking for etcd version 1963 * Godeps: adding etcd version packages 1964 * Revert "etcd: checking for etcd version" 1965 * Revert "Godeps: adding etcd version packages" 1966 1967 [ Tobias Klauser ] 1968 * Documentation: update cilium version to 0.9.0 in admin guide 1969 1970 [ Alexander Alemayhu ] 1971 * Vagrantfile: install pip by default 1972 * Revert "tests: make link check ready for vagrant" 1973 1974 [ Thomas Graf ] 1975 * bpf: Update bindata.go with go-bindata + go-1.8.3 1976 * tests: Disable go 1.8.3 specific unit test for now 1977 1978 [ shijunqian ] 1979 * Documentation: fix clerical error 1980 1981 [ Eloy Coto ] 1982 * CMD - service list command refactoring Fix #744 1983 1984 [ André Martins ] 1985 * forcely setting UTC for Time.Now() 1986 1987 [ Alexander Alemayhu ] 1988 * bpf/Makefile: add target for analyzing files 1989 1990 [ Ian Vernon ] 1991 * tests/k8s/Vagrantfile: reset kubeadm before init 1992 * Vagrantfile: use different intnet per build 1993 1994 [ Alexander Alemayhu ] 1995 * tests: add separate script for pulling in docker images 1996 1997 [ André Martins ] 1998 * etcd: checking for etcd version 1999 * Godeps: adding go-version from hashicorp 2000 2001 [ Thomas Graf ] 2002 * proxy: Extended logging of requests 2003 * k8s: Add unit test for default deny rule 2004 2005 [ Alexander Alemayhu ] 2006 * daemon: use endpoint specific error in endpoint TriggerPolicyUpdates 2007 (Closes: #677) 2008 2009 [ Thomas Graf ] 2010 * vendor: Update vendor/github.com/vishvananda/netlink/ 2011 2012 [ Ian Vernon ] 2013 * daemon: default to empty string for key-value store 2014 2015 [ Daniel Borkmann ] 2016 * cilium: add CiliumIPv6 StringNoZeroComp handler 2017 2018 [ Thomas Graf ] 2019 * proxy: Log record format improvements 2020 * Documentation: Remove demo_docs as they trigger doc build errors 2021 * Documentation: Fix broken reference 2022 * kvstore: Move all code to pkg/kvstore and add singleton client 2023 2024 [ André Martins ] 2025 * examples: update kubernetes example 2026 2027 [ Alexander Alemayhu ] 2028 * Documentation: add blank lines after listing item 2029 2030 [ Thomas Graf ] 2031 * endpoint: Factor our endpoint management into pkg/endpoint 2032 * nodeaddress: Move node address code into own package 2033 * proxy: Provide source and destination endpoint information as available 2034 2035 [ Alexander Alemayhu ] 2036 * tests: reduce sleep calls 2037 2038 [ Jonathan Davies ] 2039 * cilium-ds.yaml: Added healthchecks for cilium pods. 2040 2041 [ Thomas Graf ] 2042 * AUTHORS: Add recent new authors 2043 2044 [ Alexander Alemayhu ] 2045 * Documentation: minor nitpicks and rewording 2046 * Documentation: use git to set version info 2047 2048 [ André Martins ] 2049 * kvstore: fix race conditions in GetWatchers 2050 2051 [ Thomas Graf ] 2052 * proxy: Provide correct source endpoint ID 2053 * daemon: When BPF generation fails, log each output line separate warning 2054 * logging: Disable formatter to have simple format in TTY 2055 * daemon: Turn unnecessary info messages into debugging messages 2056 2057 [ Tobias Klauser ] 2058 * daemon: remove unnecessary cgo integration 2059 2060 [ Thomas Graf ] 2061 * proxy: Fix race when looking up endpoint metadata 2062 2063 [ John Fastabend ] 2064 * cilium: proxy uses incorrect daddr when services are used 2065 * cilium: bindata 2066 2067 [ Tobias Klauser ] 2068 * pkg/bpf: remove unnecessary cgo integration 2069 * pkg/bpf: add wrapper constants for bpf map types and flags 2070 2071 [ Alexander Alemayhu ] 2072 * daemon: remove bindata from git 2073 * contrib: add script for checking bindata 2074 * daemon: track go version used for bindata updates 2075 * daemon: only use tracked files in go-bindata 2076 * Dockerfile: make adjustments now that bindata.go is gone 2077 2078 [ André Martins ] 2079 * kvstore: erroring out with the default kvstore IPs 2080 * retrieving K8s PodCIDR from k8s-apiserver 2081 2082 [ Ian Vernon ] 2083 * tests: gather /var/run/cilium, /var/lib/cilium as part of Jenkins builds 2084 2085 [ Ross Guarino ] 2086 * docs(architecture): use /64 cluster prefix 2087 2088 [ Amre Shakimov ] 2089 * add support for CNI 0.2.x spec 2090 2091 [ André Martins ] 2092 * packaging: add .git to the list of files to copy 2093 * packaging: add scripts directory to the list of files to copy 2094 * tests: changed docker build to make docker-image 2095 * Vagrantfiles: excluding packaging docker/stage for rsync 2096 * Moved make clean from docker/Makefile to Dockerfile 2097 2098 [ John Fastabend ] 2099 * cilium: add test for lb + proxy 2100 2101 [ Thomas Graf ] 2102 * bindata: Remove auto commit on apply 2103 * bindata: Store SHA and version in daemon/bpf.sha 2104 2105 [ André Martins ] 2106 * add bindata.go to the list of ignore files 2107 * daemon: reoder flags and enhanced flags description 2108 2109 [ craigbox ] 2110 * Update gettingstarted.rst for minikube 0.20 2111 2112 [ Thomas Graf ] 2113 * bpf: Only create conntrack entries for TCP SYN packets 2114 2115 [ André Martins ] 2116 * tests: add multinode k8s tests 2117 * Jenkins: enabled k8s multi-node tests on jenkins 2118 * tests: changing VMs conflicting IPs 2119 2120 [ Tobias Klauser ] 2121 * Fix broken links to Kubernetes docs 2122 * pkg/bpf: get and store owner program type for maps 2123 2124 [ Amre Shakimov ] 2125 * fix include in Makefile 2126 2127 [ André Martins ] 2128 * daemon: returning clearer k8s error messages 2129 * Godeps: updating etcd client 2130 * etcd: make necessary changes for etcd 3.2.1 2131 2132 [ Amre Shakimov ] 2133 * use \$(RM) instead of rm for cleaning 2134 2135 [ Dan Wendlandt ] 2136 * Fix K8s typo in main README 2137 2138 [ André Martins ] 2139 * k8s: removing verbose debug message 2140 2141 [ Tobias Klauser ] 2142 * pkg/bpf: explicitly include stdint.h 2143 2144 [ André Martins ] 2145 * tests: restoring bash trace in helpers 2146 2147 [ Thomas Graf ] 2148 * tests: Wait for endpoints to become available before invoking netperf 2149 * tests: copy_files should never fail 2150 * k8s-tests: Use files of local git tree 2151 2152 [ Alexander Alemayhu ] 2153 * cmd: add description for cilium command (Closes: #1049) 2154 2155 [ Thomas Graf ] 2156 * tests/k8s: Make k8s-gsg-test.sh error out on failure 2157 * tests/k8s: Fix path to Kubernetes example files 2158 * tests/k8s: Increase memory to 2GB 2159 * tests/k8s: Use existing helper scripts to wait for state changes 2160 * Vagrantfile: Do not inherit DNS server of host 2161 * kubernetes: Add scheduler tolerations to schedule Cilium on NotReady nodes 2162 2163 [ Alexander Alemayhu ] 2164 * cmd, model: add verbose field to IdentityContext (Closes: #693) 2165 2166 [ Tobias Klauser ] 2167 * pkg/bpf: use ClockGettime from x/sys/unix instead of C wrapper 2168 2169 [ André Martins ] 2170 * Vagrantfile: use build IDs as part of VMs names 2171 2172 [ Thomas Graf ] 2173 * nodeaddress: Retrieve hostname if available 2174 * tests: Move documentation checks to the end 2175 * Dockerfile: Include bpf-map tool in container image 2176 * Vagrantfile: Include bpf-map tool in developer vagrant box 2177 2178 [ André Martins ] 2179 * ct: add aliend_id in ct maps 2180 * CT: cleaning entries when new policy denies them 2181 2182 [ Amre Shakimov ] 2183 * tools: fix Makefile for docker 2184 2185 [ Thomas Graf ] 2186 * node: Split EndpointsCIDR into IPv4 and IPv6 field 2187 * bpf: Add NonPersistent flag to force removal of map on startup 2188 * bpf: Simplified encapsulation mode 2189 * cli: Command to print contents of local tunnel endpoint map 2190 * daemon: Use real node address of host 2191 * node: Populate local node in tunnel endpoint map 2192 * lxcmap: Support migration of map format 2193 * agent: Add --ipv6-range to set per node IPv6 allocation prefix 2194 * vagrant: Use --ipv6-range to set per node prefix 2195 * agent: Print IPv4/IPv6 node IPs when starting up 2196 * agent: Provide options to overwrite IPv4/IPv6 node address 2197 * agent: Derive real IPv6 node adress and split router address 2198 * tests/lb: Do not rely on cilium_host having a global scope addres 2199 * tests/proxy: Show return http codes 2200 * agent: Masquerade IPv4 packets which leave the host 2201 * bpf: Delay opening of maps to after mount 2202 * tests/k8s: Adjust k8s multi node to new multi node mode 2203 * agent: Add --ipv4-cluster-cidr-mask-size option 2204 * nodeaddress: Validate that cluster prefix is great then node alloc prefix 2205 * cni: Install cni loopback driver if not installed already 2206 2207 [ Ian Vernon ] 2208 * tests: pick up k8s test logs, other enhancements 2209 2210 [ Michi Mutsuzaki ] 2211 * Refactor k8s.Client 2212 2213 [ André Martins ] 2214 * k8s: change daemon's k8s clientSet to Interface 2215 * k8s: add node IP CIDR in the annotations node 2216 2217 [ Daniel Dao ] 2218 * move from godeps to https://github.com/LK4D4/vndr 2219 2220 [ Thomas Graf ] 2221 * k8s: Correctly implement ClusterIP for type NodePort and LoadBalancer 2222 2223 [ Daniel Dao ] 2224 * vendor.conf: update etcd to 3.2.1 2225 * remove unused dependencies detected by vndr 2226 * remove Godeps manifest since we moved to vndr 2227 2228 [ Thomas Graf ] 2229 * examples/demo: Clean up star wars demo 2230 2231 [ Alexander Alemayhu ] 2232 * tests: check printed container ids 2233 * pkg: introduce new package for handling byteorder 2234 * bpf: don't call bpf_htonl for LXC_IPV4 2235 * byteorder: add documentation file for byteorder package (Closes: #285, 16) 2236 2237 [ Tobias Klauser ] 2238 * pkg/bpf: add new sock ops prog type 2239 2240 [ André Martins ] 2241 * K8s: keeping namespace label set in cilium NP 2242 * tests: adding l7 stresstest on different namespaces 2243 * tests: ignoring .json files in 00-no-sleep.sh 2244 * Jenkinsfile: add timestamps to builds 2245 * endpointmanager: fixed remove locked for DockerEndpointID 2246 2247 [ Eloy Coto ] 2248 * [BPF/probes]: Added kernel checks Fixes: #891 2249 2250 [ André Martins ] 2251 * k8s: implemented CiliumNetworkPolicy multi rule 2252 * tests: add one more example to tests multi CNP enforcement 2253 * tests: adding nodeselector for bookinfo spec 2254 2255 [ Ian Vernon ] 2256 * Documentation: add CoreOS getting-started-guide 2257 2258 [ Thomas Graf ] 2259 * tests: Disable CT cleanup tests for now 2260 * policy: Introduce policy repository revision 2261 * api: Return policy revision via API 2262 * api: Regenerate API code 2263 * agent/client: Report policy revision via API and print in CLI 2264 * agent: Report repository revision as endpoint policy build 2265 * cilium: New 'cilium policy wait <revison>` command 2266 * tests: Add helpers to wait for all endpoints to run a policy revision 2267 * Makefile: run etcd 3.1.0 for unit tests 2268 * vagrant: Fail if cilium.service fails and print log 2269 2270 [ Thomas Bachman ] 2271 * Fix typo in demo1.sh 2272 2273 [ Thomas Graf ] 2274 * find-llvm.sh: Add fast track for common location 2275 * bpf: Support encapsulation for packets received from a netdev 2276 * daemon: Add options to specify service CIDR 2277 * daemon: Point cluster CIDR to cilium_host in encapsulation mode 2278 * daemon: Automatically reserve conflicting local IPv4 routes in alloc prefix 2279 * proxy: Provide original identity as SO_MARK 2280 * bpf: Add additional debugging for bpf_netdev 2281 * bpf: Compile bpf_host.o after ENCAP_IFINDEX has been derived 2282 * agent: Masquerade traffic from host into cilium cluster 2283 * bpf: Support reaching the local node from the overlay 2284 * bpf: Store source identity in proxy map 2285 * proxy: Inherit endpoint source identity from proxy map 2286 * bpf: Attach bpf_host.o at egress of cilium_host 2287 * tests: Fix 06-lb.sh 2288 * bpf: Redirect to HOST_IFINDEX when doing proxy redirect 2289 * tests: Remove multinode L7 tests workaround 2290 2291 [ Ian Vernon ] 2292 * cmd: add output options for cilium monitor 2293 2294 [ Thomas Graf ] 2295 * bpf: Provide identity in capture messages 2296 * bpfdebug: Improve DumpInfo() output 2297 * monitor: Decode layers unless disabled 2298 * monitor: Print separator between messages in non-info mode 2299 * bpf: Do not require DEBUG flag to emit basic tracing messages 2300 * bpf: Make tracing capture len configurable 2301 2302 [ Ian Vernon ] 2303 * pkg/bpfdebug: fix errant c/p in DumpInfo func desc 2304 2305 [ Amre Shakimov ] 2306 * cilium-cni: move labels to ep 2307 * cni-plugin: pass through labels during ep creation 2308 2309 [ Alexander Alemayhu ] 2310 * git: ignore more files 2311 * cmd: replace some of the placeholders with short descriptions 2312 * daemon: remove dead monitor code 2313 * pkg/byteorder: use Swap{16,32} in NetworkToHost 2314 * tests: fix typo 2315 2316 [ Thomas Graf ] 2317 * monitor: Fix message separator output 2318 * labels: Include source in sortedList() 2319 2320 [ Daniel Dao ] 2321 * fix overflow of arguments array 2322 2323 [ André Martins ] 2324 * daemon: cleaning up leftover veths 2325 2326 [ Daniel Borkmann ] 2327 * cilium: remove stale id also from policy map 2328 * cilium: also remove cilium_calls maps 2329 2330 [ André Martins ] 2331 * Updating list of AUTHORS 2332 2333 [ Amre Shakimov ] 2334 * fix kvstore arg for docker-compose example 2335 2336 [ André Martins ] 2337 * tests: add k8s multi node to stress the L7 proxy 2338 2339 [ Ian Vernon ] 2340 * tests: only change permissions of created logs dir 2341 2342 [ Amre Shakimov ] 2343 * remove tmp debug file 2344 2345 [ Eloy Coto ] 2346 * [Packaging] Fix deb packages build 2347 * Version 0.9.90 2348 2349 [ Thomas Graf ] 2350 * Prepare development branch after release 2351 * k8s: Specify ClusterRoleBinding group 2352 * cilium: Print component status message 2353 2354 -- Thomas Graf <thomas@cilium.io> Wed, 19 Jul 2017 20:27:06 +0000