openshift/ingress-node-firewall

Issues

• Use or extend to support rules for API IP served via metallb on baremetal

  #548 opened 5 months ago by callum-stakater
  9

• Future Release Branches Frozen For Merging | branch:release-4.18 branch:release-4.19

  #520 opened 8 months ago by openshift-merge-robot
  0

• Future Release Branches Frozen For Merging | branch:release-4.16 branch:release-4.17

  #36 opened 8 months ago by openshift-merge-robot
  0

• Support for setting rules to specific routes/namespaces?

  #426 opened 9 months ago by sedadas
  11

• Configuration is permitted when interfaces is missing from INF object

  #444 opened a year ago by pbmoses
  7

• RFE: allow blocking the SSH port

  #287 opened 2 years ago by freedge
  5

• SCTP tests dont execute due to unknown issue capturing netcat stdout

  #216 opened a year ago by martinkennelly
  12

• Improve ingressnodefirewall_controller.go code

  #97 opened 2 years ago by andreaskaris
  6

• Should we have a INF status that identifies obj application is pending?

  #171 opened 2 years ago by martinkennelly
  10

• ci e2e test is very flaky

  #331 opened 2 years ago by msherif1234
  1

• sync OWNERS

  #311 opened 2 years ago by danwinship
  1

• e2e ci on OCP is recently broken need investigation KinD run is fine

  #296 opened 2 years ago by msherif1234
  0

• On OCP, controller reports bad certificate for webhook

  #207 opened 2 years ago by martinkennelly
  6

• Reserve ports used

  #71 opened 2 years ago by martinkennelly
  5

• OCP CI failed to attach XDP to ocp's node virtio interface

  #139 opened 2 years ago by msherif1234
  6

• Exact match verus longest match

  #59 opened 2 years ago by martinkennelly
  4

• PR #238 is continuously failing e2e

  #244 opened 2 years ago by msherif1234
  1

• The daemon container fails to start when using KIND with the rootless podman provider

  #95 opened 2 years ago by frobware
  3

• recent failures when running E2E on KinD

  #224 opened 2 years ago by msherif1234
  6

• Test improvement: switch bpf-mounter daemonset image to a smaller image

  #227 opened 2 years ago by martinkennelly
  1

• Daemon doesnt remove INF policy

  #222 opened 2 years ago by martinkennelly
  2

• Incorrect spec.interface name defined causes daemon to stop applying additional INF policies

  #217 opened 2 years ago by martinkennelly
  1

• add unit and e2e tests that test rules updates (including deletion, etc.)

  #102 opened 2 years ago by andreaskaris
  2

• Mixing ICMP v4 and v6 config causes a panic

  #205 opened 2 years ago by martinkennelly
  2

• I saw "could not attach XDP program: create link: device or resource busy" once

  #208 opened 2 years ago by martinkennelly
  2

• user should be able to configure 0.0.0.0/0 deny all rule

  #194 opened 2 years ago by msherif1234
  0

• webhook overlapping order is broken

  #170 opened 2 years ago by martinkennelly
  3

• Fix race condition in IngressNodeFirewallController

  #93 opened 2 years ago by andreaskaris
  2

• remove ebpf generated .o files from github

  #166 opened 2 years ago by msherif1234
  1

• statistics with float format made it hard to instrument drop rate performance

  #159 opened 2 years ago by msherif1234
  0

• Webhook incorrectly fire up during legit rules update

  #155 opened 2 years ago by msherif1234
  0

• When starting the opeartor locally with make install run , the DaemonSet's ebpf doesn't work

  #61 opened 2 years ago by andreaskaris
  2

• can't include sctp headers from the kernel plugin

  #131 opened 2 years ago by msherif1234
  1

• E2E test is failing on multi node KinD cluster

  #111 opened 2 years ago by msherif1234
  0

• ebpf rules - implement correct idempotent rules merge

  #101 opened 2 years ago by andreaskaris
  0

• fix initial e2e-test failure in make test-e2e

  #99 opened 2 years ago by andreaskaris
  0

• troubleshoot why it takes a minute to start the daemon set

  #100 opened 2 years ago by andreaskaris
  1

• 3d2ce73 break unit tests

  #107 opened 2 years ago by andreaskaris
  5

• make docker-build fails during unit-test if there is no cluster created

  #106 opened 2 years ago by msherif1234
  2

• Add API method to list all attached XDP interfaces

  #98 opened 2 years ago by andreaskaris
  1

• Make sure to check valid interfaces names instead of crashing

  #91 opened 2 years ago by andreaskaris
  0

• Strange race condition in (infc *IngNodeFwController) IngressNodeFwAttach

  #92 opened 2 years ago by andreaskaris
  0

• Webhook should be in a separate pkg from the API

  #78 opened 2 years ago by martinkennelly
  1

• Make resources namespaced or not

  #54 opened 2 years ago by andreaskaris
  2

• BPF prog doesn't load on OCP 4.12

  #74 opened 2 years ago by martinkennelly
  1

• Rename IngrNodeFwConfig to IngressNodeFirewallConfig

  #55 opened 2 years ago by andreaskaris
  1

• Expose webhook environment variable

  #49 opened 2 years ago by martinkennelly
  1