Commit Graph

37 Commits

Author SHA1 Message Date
Patrick Ohly 6fd4cb1ba0 remove import doc comments
The "// import <path>" comment has been superseded by Go modules.
We don't have to remove them, but doing so has some advantages:

- They are used inconsistently, which is confusing.
- We can then also remove the (currently broken) hack/update-vanity-imports.sh.
- Last but not least, it would be a first step towards avoiding the k8s.io domain.

This commit was generated with
   sed -i -e 's;^package \(.*\) // import.*;package \1;' $(git grep -l '^package.*// import' | grep -v 'vendor/')

Everything was included, except for
   package labels // import k8s.io/kubernetes/pkg/util/labels
because that package is marked as "read-only".

Kubernetes-commit: 8a908e0c0bd96a3455edf7e3b5f5af90564e65b0
2024-12-02 14:43:58 +01:00
Dan Winship 0997395d3d Document the existence of nftables as a kube-proxy mode.
Kubernetes-commit: 49080bf02a10eab38d8a39002427a5800b80631d
2024-11-08 08:52:25 -05:00
Dan Winship cce570133b Add me to kube-proxy config api approvers
Kubernetes-commit: 5c372faca60c84aa6bff3e705690917f7f7c2387
2024-07-17 09:41:53 -04:00
Daman Arora b72c24b835 kube-proxy: internal config: add Windows section
Introduce Windows section for internal configuration of kube-proxy
adhering to the v1alpha2 version specifications as detailed in
https://kep.k8s.io/784. This also introduces WindowsRunAsService
to v1alpha1 configuration.

Signed-off-by: Daman Arora <aroradaman@gmail.com>

Kubernetes-commit: 7a6fec3ea7646be2dc36711b75aa035f89a71f88
2024-07-13 19:17:34 +05:30
Kundan Kumar 30c4495efa kube-proxy confif update
Kubernetes-commit: 0375192c5cef1035af033e4d4add196129f8f459
2024-06-13 12:09:02 +05:30
Dan Winship bec13f0163 Add `--nodeport-addresses primary`
The behavior when you specify no --nodeport-addresses value in a
dual-stack cluster is terrible and we can't fix it, for
backward-compatibility reasons. Actually, the behavior when you
specify no --nodeport-addresses value in a single-stack cluster isn't
exactly awesome either...

Allow specifying `--nodeport-addresses primary` to get the
previously-nftables-backend-specific behavior of listening on only the
node's primary IP or IPs.

Kubernetes-commit: 0b599aa8e33385a07a807dadf66ebf8cf7b77784
2024-02-02 09:43:39 -05:00
Dan Winship 452ea12a48 Simplify nftables/proxier.go by removing localhost nodeport support
and related route_localnet setting / anti-martian-packet rule

Kubernetes-commit: 1a6b9b811e303c033006e9a3223258582149b69b
2023-05-17 15:48:59 -04:00
Dan Winship 4bb0515ddd Add a dummy nftables kube-proxy backend which is just a copy of iptables
Kubernetes-commit: a70653143e928dbe657141f14117e4514681624e
2023-05-09 15:55:04 -04:00
Daman Arora 4e217dd520 pkg/proxy: configure tcp-be-liberal
Signed-off-by: Daman Arora <aroradaman@gmail.com>

Kubernetes-commit: 9ae77364e959da869c59ba5e3149808264ec03be
2023-10-27 00:08:22 +05:30
Dan Winship 93cff160bb update generated
Kubernetes-commit: 6c9ddf300cfe6840c2179fc5464378da1d8aae7b
2023-08-30 17:17:38 -04:00
Dan Winship 0b449dbc91 Rearrange kube-proxy config fields / CLI flags to make more sense.
Kubernetes-commit: 9242cb193488ca769863a4121c153d4ea200d826
2023-08-30 13:01:16 -04:00
Dan Winship 16f6d3d303 Improve kube-proxy config / CLI documentation
Kubernetes-commit: 44cb330aa00fa3bcded1941560693fd3008412c0
2023-08-30 12:50:05 -04:00
Daman Arora cc0bd3193c pkg/proxy: add flag to configure udp conntrack timeouts
Signed-off-by: Daman Arora <aroradaman@gmail.com>

Kubernetes-commit: 15ae6cc1607ee805698b82cd3942afd6a02077ef
2023-09-21 18:52:00 +05:30
cyclinder 0c73cd16c5 add flag 'logging-format' to kube-proxy
Kubernetes-commit: 71ef0dafa72ca8cf2aa26fe1a75d3379a551771a
2023-07-06 22:30:45 +08:00
cyclinder f6ee56b50f kube-proxy: add a flag to disables the allowing NodePort services to be accessed via localhost
Kubernetes-commit: bef207003148dfe061672269003d4727afb5170c
2022-11-02 16:17:52 +08:00
Amim Knabben 46f55fa9c4 Fixing words in the comment
Kubernetes-commit: c0d323f1f61340127f9545cfae08da84eb5ec4cd
2022-10-15 15:54:41 -03:00
Amim Knabben e326d8577e Remove Linux and Windows Kube-proxy Userspace mode
Kubernetes-commit: 7df6c02288833c7be66f425e03c1e858d2343f1f
2022-08-30 17:40:35 -03:00
Surya Seetharaman b85d3adcdd Enable local traffic detection using the interface options
This commit adds the framework for the new local detection
modes BridgeInterface and InterfaceNamePrefix to work.

Signed-off-by: Surya Seetharaman <suryaseetharaman.9@gmail.com>

Kubernetes-commit: 7d480d8ac8e33330af8c8ea863d19d9b547f3bdb
2022-01-29 12:01:09 +01:00
Yongkun Gui c63cc549a9 Fix health check from Google's Load Balancer
This change adds 2 options for windows:
--forward-healthcheck-vip: If true forward service VIP for health check
port
--root-hnsendpoint-name: The name of the hns endpoint name for root
namespace attached to l2bridge, default is cbr0

When --forward-healthcheck-vip is set as true and winkernel is used,
kube-proxy will add an hns load balancer to forward health check request
that was sent to lb_vip:healthcheck_port to the node_ip:healthcheck_port.
Without this forwarding, the health check from google load balancer will
fail, and it will stop forwarding traffic to the windows node.

This change fixes the following 2 cases for service:
- `externalTrafficPolicy: Cluster` (default option): healthcheck_port is
10256 for all services. Without this fix, all traffic won't be directly
forwarded to windows node. It will always go through a linux node and
get forwarded to windows from there.
- `externalTrafficPolicy: Local`: different healthcheck_port for each
service that is configured as local. Without this fix, this feature
won't work on windows node at all. This feature preserves client ip
that tries to connect to their application running in windows pod.

Change-Id: If4513e72900101ef70d86b91155e56a1f8c79719

Kubernetes-commit: 78a507b25647adbf481551c65b900cd817e7a7b3
2021-03-29 23:27:39 +00:00
Davanum Srinivas 3de760d311 Check in OWNERS modified by update-yamlfmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: 9405e9b55ebcd461f161859a698b949ea3bde31d
2021-12-09 21:31:26 -05:00
Stephen Augustus 952d0c1aad generated: Run hack/update-gofmt.sh
Signed-off-by: Stephen Augustus <foo@auggie.dev>

Kubernetes-commit: 481cf6fbe753b9eb2a47ced179211206b0a99540
2021-08-12 17:13:11 -04:00
liuhongyu f52f9fe570 Fix the kube-proxy comment so that the document can be generated correctly
Kubernetes-commit: d1525ec808c2c2ac6987f12cc68acf0b5a776650
2020-10-26 23:13:50 +08:00
SataQiu 3d39bab399 kube-proxy: add '--bind-address-hard-fail' flag to treat failure to bind to a port as fatal
Signed-off-by: SataQiu <1527062125@qq.com>

Kubernetes-commit: 871b90ba23920573e27f75a2c62b8a5362fdb064
2020-04-02 13:13:10 +08:00
Satyadeep Musuvathy cafffb64d4 Refactor handling of local traffic detection.
Kubernetes-commit: 8c6956e5bb4f9557e6ba459f1f6bbcb80e3b5b80
2020-01-16 18:51:31 -08:00
RainbowMango 792da1facd Add show hidden flag to kube-proxy
Kubernetes-commit: 9b7d8712cfa81078593e12dbd0c43f680ab4d910
2019-11-14 17:19:49 +08:00
Andrew Sy Kim 310c8aae97 support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout
Signed-off-by: Andrew Sy Kim <kiman@vmware.com>

Kubernetes-commit: db2c048db9c7572b2bbc66cba3865a258b2a44fa
2019-11-21 18:52:48 -05:00
Md Tahsin Rahman 385a90fb38 Add tests for kubeproxyconfig
Kubernetes-commit: ce5cbe8b13d4876140a4ca7319a184e953575505
2019-11-03 21:09:08 +06:00
Vallery Lancey 8978daadb0 Removed deprecated --resource-container flag from kube-proxy.
Kubernetes-commit: dc0f14312e43e6733fc174492be2eaf6eab1cbf5
2019-05-24 04:00:16 -07:00
Ricardo Pchevuzinske Katz 5849b89224 Remove deprecated flag --conntrack-max from kube-proxy
Kubernetes-commit: 82c42bb6eefbec42c0241cbd808c7248bea12f40
2019-05-29 16:36:11 -03:00
Laurent Bernaille 8ac2d13e72 [kube-proxy/ipvs] Add flag to enable strict ARP
Kubernetes-commit: 09f821ddb58dd59e89130f03b75a700061c117a8
2019-03-12 13:50:29 +01:00
ksubrmnn 37f9c67c8a Add Windows flags for KubeProxyConfiguration
Kubernetes-commit: a47e99e37ac7d3cd2099d10df1ff250d1a110fd5
2019-01-11 14:45:34 -08:00
Roy Lenferink 50c3f0c954 Updated OWNERS files to include link to docs
Kubernetes-commit: b43c04452f3b563473b5c2a765d4ac18cc0ff58f
2019-01-30 20:05:00 +01:00
Lucas Käldström ce88fda7f1 Updated references from k8s.io/{apiserver,apimachinery} to the new k8s.io/component-base repo. Co-authored-by @Klaven
Kubernetes-commit: 0140c82c16ebd87a771393a4d39f47435b40c12d
2019-01-06 14:01:26 +02:00
Jordan Liggitt 828dd9ff16 Update API-related owners files
Kubernetes-commit: 8c20bdaf4661f8764c7a7f2e42674aa6a9bf5d70
2018-10-30 17:05:08 -04:00
Lucas Käldström 47e2fafb04 Standardize componentconfig code/comment patterns
Kubernetes-commit: 83d53ea1c2aeda3619c3aafeb9cf7e50c124058e
2018-09-06 13:42:02 +03:00
Lion-Wei 870a8700ec update autogenerated file
Kubernetes-commit: 47153803fb7bba7330874fcd52228d4eb13a098c
2018-08-25 15:58:15 +08:00
Lion-Wei ded2913d29 move external kube-proxy componentConfig to k8s.io/kube-proxy/config/
Kubernetes-commit: 37e6266ef4b203a3241bf140f36ff8ae29d2e1f7
2018-08-25 15:34:56 +08:00