openstack/openstack
Code Issues Proposed changes

Update git submodules

Browse Source 
* Update kuryr-kubernetes from branch 'master'
  - Merge "NP: Don't add pods without IP to affectedPods"
  - NP: Don't add pods without IP to affectedPods
    
    We use affectedPods to comfortably track the list of the pods that the
    NetworkPolicy indirectly targets (i.e. matches their ports). It doesn't
    make sense to put pods without IP there, as well as it is impossible now
    with new KuryrNetworkPolicy CRD.
    
    We haven't seen that problem on previous CRD as we've used a weird
    format to save that info: {'<pod-ip>': '<pod-namespace'}. If <pod-ip>
    was None, json.dumps serialized that into {'null': '<pod-namespace>'},
    which was as happily accepted by K8s API as it was utterly useless.
    
    This commit makes sure we only put pods with IP on affectedPods field.
    Please also note that we already have protection in place to make sure
    we won't create rules for pods without IP (those rules would effectively
    open too much traffic), so that is already covered.
    
    Change-Id: Ie82a153c89119fc8f70071353c8e46b27d643935
    Closes-Bug: 1892208
This commit is contained in:
Zuul 2020-08-21 08:46:56 +00:00 committed by Gerrit Code Review
parent a1c962de26
commit eff465874f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kuryr-kubernetes

@ -1 +1 @@
Subproject commit 950420a4d9087ea9d4d6d835ecf25973db2eb3fd
Subproject commit c5c1585b823a7e819f43ab38cc86b3d280fdbbf3