openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update kuryr-kubernetes from branch 'master'
  to 7116f8300052997455b8bd1e4540072182c7c195
  - Merge "Fix NPs for OVN LBs with hairpin traffic"
  - Fix NPs for OVN LBs with hairpin traffic
    
    In case of hairpin LB traffic (member of the LB calls the LB and the
    request is directed back to the same member) OVN replaces the source-ip
    of the request with the LB IP. This means that pods with network
    policies applied may have that traffic blocked when it should be
    allowed.
    
    To fix that this commit makes sure that SGs used for NPs include ingress
    rules for each of the Service in it's namespace. It's not ideal but
    seems to be a fair compromise between opening as little traffic as
    possible and increasing number of security groups and rules.
    
    As this commit makes sure all the NPs in the namespaces are reanalyzed
    every time a Service is created or deleted, a little fixes in order to
    support that are also made.
    
    Change-Id: I7e0458c4071e4a43ab4d158429e05c67cd897a3c
    Closes-Bug: 1923452
This commit is contained in:
Zuul 2021-05-06 11:57:30 +00:00 committed by Gerrit Code Review
parent cf58257b0b
commit b9d7c94bb0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kuryr-kubernetes

@ -1 +1 @@
Subproject commit 2d78b7ab1cb4799b6f1c00e8c40ff549f8d986c7
Subproject commit 7116f8300052997455b8bd1e4540072182c7c195