- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 14 for Setns (0.04 sec)
-
cni/pkg/nodeagent/net.go
// in that case, try finding the netns using procfs. filter := map[types.UID]*corev1.Pod{ pod.UID: pod, } return s.scanProcForPodsAndCache(filter) } func (s *NetServer) getOrOpenNetns(pod *corev1.Pod, netNs string) (Netns, error) { if netNs == "" { return s.getNetns(pod) } return s.openNetns(pod, netNs) } func (s *NetServer) openNetns(pod *corev1.Pod, netNs string) (Netns, error) {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 06 05:10:23 UTC 2024 - 13.4K bytes - Viewed (0) -
cni/pkg/nodeagent/podcgroupns.go
return nil, nil } netns, err := proc.Open(netnsName) if err != nil { return nil, err } fd, err := GetFd(netns) if err != nil { netns.Close() return nil, err } netnsObserved[inode] = struct{}{} log.Debugf("found pod to netns: %s %d", uid, inode) return &PodNetnsEntry{ uid: uid, netns: netns, netnsfd: fd, inode: inode, }, nil }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Apr 12 21:47:31 UTC 2024 - 11K bytes - Viewed (0) -
tools/istio-iptables/pkg/dependencies/implementation_linux.go
// Note that this is highly dependent on context. // new pod netns? probably no rules. Hostnetns? probably rules // So this is mostly just a "hint"/heuristic as to which version we should be using, if more than one binary is present. // `xx-save` should return _no_ output (0 lines) if no rules are defined in this netns for that binary variant.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Mar 12 20:49:10 UTC 2024 - 12K bytes - Viewed (0) -
cni/pkg/nodeagent/net_test.go
assert.Equal(t, nlDeps.DelLoopbackRoutesCnt.Load(), 1) // make sure the uid was taken from cache and netns closed netns := fixture.podNsMap.Take(string(pod.UID)) assert.Equal(t, nil, netns) // run gc to clean up ns: //revive:disable-next-line:call-to-gc Just a test that we are cleaning up the netns runtime.GC() assertNSClosed(t, closed) } func TestServerDeletePod(t *testing.T) {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 06 05:10:23 UTC 2024 - 17.8K bytes - Viewed (0) -
cni/pkg/nodeagent/ztunnelserver.go
"number of connections to ztunnel") type ZtunnelServer interface { Run(ctx context.Context) PodDeleted(ctx context.Context, uid string) error PodAdded(ctx context.Context, pod *v1.Pod, netns Netns) error Close() error } /* To clean up stale ztunnels we may need to ztunnel to send its (uid, bootid / boot time) to us so that we can remove stale entries when the ztunnel pod is deleted
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 23 22:07:03 UTC 2024 - 12.3K bytes - Viewed (0) -
cni/pkg/repair/repaircontroller.go
netns, err := runInHost(func() (string, error) { return getPodNetNs(pod) }) if err != nil { m.With(resultLabel.Value(resultFail)).Increment() return fmt.Errorf("get netns: %v", err) } log = log.WithLabels("netns", netns) if err := redirectRunningPod(pod, netns); err != nil { log.Errorf("failed to setup redirection: %v", err)
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Sat Feb 10 00:31:55 UTC 2024 - 10.4K bytes - Viewed (0) -
cni/README.md
- on pod add, determines whether pod should have netns setup to redirect to Istio proxy. See [cmdAdd](#cmdadd-workflow) for detailed logic. - it connects to K8S using the kubeconfig and JWT token copied from install-cni to get Pod and Namespace. Since this is a short-running command, each invocation creates a new connection. - If so, calls `istio-iptables` with params to setup pod netns - If ambient, sets up the ambient logic.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri May 03 19:29:42 UTC 2024 - 12.3K bytes - Viewed (0) -
cni/pkg/nodeagent/informers.go
log.Infof("pod %s update event skipped, reason: added/labeled by CNI plugin", pod.Name) return nil } log.Debugf("pod %s now matches, adding to mesh", newPod.Name) // netns == ""; at this point netns should have been added via the initial snapshot, // or via the cni plugin. If it happens to get here before the cni plugin somehow,
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 06 21:31:35 UTC 2024 - 11.8K bytes - Viewed (0) -
cni/pkg/plugin/plugin_test.go
Name: testNSName, Namespace: "", Labels: map[string]string{}, }, } return fakePod, fakeNS } func (mrdir *mockInterceptRuleMgr) Program(podName, netns string, redirect *Redirect) error { mrdir.lastRedirect = append(mrdir.lastRedirect, redirect) return nil } // returns the test server URL and a dispose func for the test server
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue May 21 18:32:01 UTC 2024 - 17.5K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
"--mark", inpodMark, "-j", "CONNMARK", "--set-xmark", inpodTproxyMark) // Handle healthcheck probes from the host node. In the host netns, before the packet enters the pod, we SNAT // the healthcheck packet to a fixed IP if the packet is coming from a node-local process with a socket. //
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri May 31 21:45:18 UTC 2024 - 19.9K bytes - Viewed (0)