1
39%
master: 39%

Ran 29 Aug 2019 04:22PM UTC

Files 439

Run time 31s

Badge

Embed ▾

Committed 29 Aug 2019 04:02PM UTC coverage: 44.051% (-0.04%) from 44.086%

Job # 10458.1

Build Type

push

travis-ci-com

Committed by

ianvernon

Commit Message

test: Remove workaround to MASQ traffic from k8s2

The workaround is no longer needed, as a request to api-server from
k8s2 is being MASQUERADE'd by the following kube-proxy rules:

```
-A KUBE-SERVICES ! -s 10.10.0.0/16 -d 10.96.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ
-A KUBE-SERVICES -d 10.96.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y

-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000
-A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE
```

The MASQUERADE happens after the service DNAT translation, so the source
IP of the right interface is going to be selected.

In the case of kubeproxy-free, we don't need any MASQUERADE rule, as
the transparent host-lb changes the api-server ClusterIP to a node IP
before the kernel routing layer is involved.

Signed-off-by: Martynas Pumputis <m@lambda.lt>

Coverage Stats

25444 of 57760 relevant lines covered (44.05%)

1166.14 hits per line

cilium / cilium / 10458 / 1
39%
master: 39%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 10458.1

cilium / cilium / 10458 / 1 39% master: 39%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 10458.1

cilium / cilium / 10458 / 1
39%
master: 39%

README BADGES
x