Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support setting failsafepolicy net #689

Merged
merged 1 commit into from
Apr 18, 2024
Merged

Support setting failsafepolicy net #689

merged 1 commit into from
Apr 18, 2024

Commits on Apr 9, 2024

  1. Support setting failsafepolicy net

    This patch adds support for setting the .net property when defining
    the failsafepolicies in felixconfig. This is a not so well documented
    feature that slipped through when aiming for feature parity.
    
    For reference, here is the documentation for [0] felixconfig.
    - setting failsafeInboundHostPorts to e.g. {Net: "10.0.0.0/24", ...}
    will add a filter for inbound packets for their source prefix to match 10.0.0/24.
    - setting failsafeOutboundHostPorts to e.g. {Net: "20.0.0.0/24". ...}
    will add a filter for outbound packets for their destination prefix to match 20.0.0/24
    
    [0] https://docs.tigera.io/calico/latest/reference/resources/felixconfig#spec
    
    Signed-off-by: Nathan Skrzypczak <[email protected]>
    sknat committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    a76c765 View commit details
    Browse the repository at this point in the history