{"push_id":4111332953,"size":74,"distinct_size":0,"ref":"refs/heads/release-4.4","head":"5f2514d799bf015915ded456792dc8eb687b3d77","before":"2838bf96025aa08e0472c016294ce425b2ff15df","commits":[{"sha":"dfc79c5f728dd046e4fe30d76fc3ddcb62281352","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"remove other-config:exclude_ips key once that IP address is allocated\n\novn-northd complains with a warning message \"Duplicate IP set\" when the\nIP address set in logical switch's other_config:exclude_ips key is\nstatically allocated to a logical switch port. To eliminate that\nwarnings we'd need to remove the exclude_ips configuration in the same\ntransaction as the creation of the management port.\n\nSigned-off-by: Yun Zhou <yunz@nvidia.com>\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/dfc79c5f728dd046e4fe30d76fc3ddcb62281352"},{"sha":"e74730b284ab163db63db6492ff4ecc147b81a6e","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"ovnkube-master and ovnkube-db pods shouldn't have hostPID set to true\n\nCurrently, those two pods have hostPID set to true. So, this means that\nthey can see all the processes in host process namespace. This is not\ngood from the security perspective.\n\nCommit 59c345931f9d (use ovs-appctl to check for process readiness and\nhealth) added support to check process readiness and health using\na control socket instead of a PID.\n\novnkube-node pod cannot be yet moved to hostPID:false since we open\nnetwork namespace (PID in host process namespace) from within the pod\nwhile adding an interface to the pod. so, this pod will be tackled in\na separate commit.\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/e74730b284ab163db63db6492ff4ecc147b81a6e"},{"sha":"2da17e9bf2d7f0f91164306855d93c6a6aeb4ebe","author":{"name":"Dan Williams","email":"aeade43d0f8ae14e7c44fa81fe17c1635ae376fe@redhat.com"},"message":"Merge pull request #783 from girishmg/no_hostpid\n\novnkube-master and ovnkube-db pods shouldn't have hostPID set to true","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/2da17e9bf2d7f0f91164306855d93c6a6aeb4ebe"},{"sha":"df515008fadcbd18b5ea40b5de60d78f22a2636b","author":{"name":"Dan Williams","email":"aeade43d0f8ae14e7c44fa81fe17c1635ae376fe@redhat.com"},"message":"Merge pull request #779 from girishmg/duplicate_ip\n\nremove other-config:exclude_ips key once that IP address is allocated","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/df515008fadcbd18b5ea40b5de60d78f22a2636b"},{"sha":"f7d7422e582f394bc6720d041e0ef3d1a738adc3","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"Adding Girish Moodalbail (girishmg) as approver\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/f7d7422e582f394bc6720d041e0ef3d1a738adc3"},{"sha":"259bc556f734aab01a481e549e881ac9076bc805","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"Revert \"gateway/local: stop double-NAT-ing\"\n\nThis reverts commit 3a69c3d3. Needs some re-work.\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/259bc556f734aab01a481e549e881ac9076bc805"},{"sha":"d634050a14501a3640dfc7c5e19a338ffa62ec73","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"ovn-nbctl daemon mode until we get golang OVSDB bindings\n\nEvery invocation of ovn-nbctl command connects to northbound database\nrunning on a remote server, retrieves a partial copy of the database\nthat is complete enough to do its work, sends a transaction request to\nthe server, and receives and processes the server’s reply. In common\ninteractive use, this is fine, but if the database is large, then the\ncommand takes a long time to complete and yields poor performance.\n\nThe solution to this problem is to use golang OVSDB bindings. However,\nIn the absence of the bindings the next best solution is to use\novn-ncbtl in the daemon mode.\n\nIn a \"daemon mode\", the user first starts ovn-nbctl running in the\nbackground and afterward uses the daemon to execute operations. The\nclient needs to use the control socket and set the path to the control\nsocket in environment variable OVN_NB_DAEMON.\n\nChanges have been made such that it can be used in non-daemonset mode as\nwell.\n\nAlso, this will be used for ovn-nbctl invocations in ovnkube --master\nmode only.\n\nSigned-off-by: Yun Zhou <yunz@nvidia.com>\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/d634050a14501a3640dfc7c5e19a338ffa62ec73"},{"sha":"65cfb3992a64ad9b61b0b3eae204d57d30c50afb","author":{"name":"Dan Williams","email":"aeade43d0f8ae14e7c44fa81fe17c1635ae376fe@redhat.com"},"message":"Merge pull request #777 from girishmg/nbctl_daemon\n\novn-nbctl daemon mode until we get golang OVSDB bindings","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/65cfb3992a64ad9b61b0b3eae204d57d30c50afb"},{"sha":"ef269760a6556f1b2cb0c2f8edfd75dd01443532","author":{"name":"Phil Cameron","email":"33383f83f86213d1b5b1ab82934768577b825301@redhat.com"},"message":"OVN ovnkube.sh remove version 1,2 support\n\nhttps://jira.coreos.com/browse/SDN-495\n\nSigned-off-by: Phil Cameron <pcameron@redhat.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/ef269760a6556f1b2cb0c2f8edfd75dd01443532"},{"sha":"10ceb271ed3b079616cee2af4009d6a3f85e08e3","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"Merge pull request #787 from pecameron/sdn495\n\nOVN ovnkube.sh remove version 1,2 support","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/10ceb271ed3b079616cee2af4009d6a3f85e08e3"},{"sha":"2e4e72ce2ce270eceb2fbeb3bdfd55d355dc1e6a","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"remove TEMP HACK - WORKAROUND verbiage from ovnkube.sh\n\nRunning \"local\" gateway mode is not a HACK. It is one of the ways to\nachieve North-South traffic (aka traffic external to logical network).\n\nIf operators want to run \"shared\" gateway mode, then it is well\nunderstood that they shouldn't be running ovs-server container in the\novnkube-node POD. The expectation is that the OVS bridge with\nright physical NIC as one of the bridge's port is already created in\nthe K8s node and that ovs-vswitchd and ovsdb-server processes are\nrunning in the node.\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/2e4e72ce2ce270eceb2fbeb3bdfd55d355dc1e6a"},{"sha":"c6ece45ffd6f6d99e29d5778b8bf7f5d3097aec5","author":{"name":"Michael Cambria","email":"acfa1209eef7fc5fdcf403d96dc449aa26f18566@redhat.com"},"message":"cluster.go: Allow GENEVE port to be set via ovs-vsctl\nAllow the port used for a GENEVE tunnel to be set to a value\nother than the default.\n\nSigned-off-by: Michael Cambria <mcambria@redhat.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/c6ece45ffd6f6d99e29d5778b8bf7f5d3097aec5"},{"sha":"503689919e811064a19eefa68676dac3bc5f8868","author":{"name":"Zhen Wang","email":"7fd28998db4ede694c17768ccc0ae52566ae810f@nvidia.com"},"message":"add missing iptables package to fedora dockerfile","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/503689919e811064a19eefa68676dac3bc5f8868"},{"sha":"288c79e243e7f09a07db25785b9e1077a9e10ad9","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"Merge pull request #794 from mccv1r0/sdn-386\n\nAllow GENEVE port to be set","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/288c79e243e7f09a07db25785b9e1077a9e10ad9"},{"sha":"76f517437fc65fc28aa8f961eb49ad6f830944f4","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"update various .gitignore files with runtime artifacts\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/76f517437fc65fc28aa8f961eb49ad6f830944f4"},{"sha":"2e0019b2e3f12670005cd711659c37ecc817ad1f","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"remove unnecessary volume mounts in ovnkube-node pod containers\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/2e0019b2e3f12670005cd711659c37ecc817ad1f"},{"sha":"4834845db67b3d416da170324b0c44dbe3606912","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"remove unnecessary volume mounts in ovnkube-master pod containers\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/4834845db67b3d416da170324b0c44dbe3606912"},{"sha":"0fe475d36c6f3c53c88c4e577cf334fc19622b53","author":{"name":"Shahar Klein","email":"5bdbb6e8bce12a6419adbe5e7d8b323892fa9d73@nvidia.com"},"message":"Get git info from git commands\n\nCurrently this info is parsed from files that are not guarnteed to be there.\nFor example in the case of git-pack-refs.\n\nSigned-off-by: Shahar Klein <sklein@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/0fe475d36c6f3c53c88c4e577cf334fc19622b53"},{"sha":"fddd525cddcd42c95710eaec3d1a50a1d57d3e39","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"enable port security on the pod's logical switch port\n\nThe port security is currently disabled. This means that the packets\nwith any ip/mac can be received/sent by the pod. A pod can do both MAC\nand IP spoofing. However, by enabling port security we can limit the\naddresses from which a logical port may send packets and to which it\nmay receive packets. This can be enabled by setting the\nlogical_switch_port's port_security column to the port's (MAC, IP)\naddress.\n\nWe cannot enable port security on K8s management logical switch port\nsince packets meant for local k8s node are forwarded through that port.\nSo, it receives packets with destination IP address that does not\nbelong to it.\n\nSigned-off-by: Girish Moodalbail <gmoodalbail@nvidia.com>","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/fddd525cddcd42c95710eaec3d1a50a1d57d3e39"},{"sha":"d7cd0ef322c5579ec4e446d9ec78198b4e1e8d6e","author":{"name":"Girish Moodalbail","email":"74ea68506563fcb14ffc94b33dcc0cf7da66ea4d@nvidia.com"},"message":"Merge pull request #802 from shahar-klein/git-info\n\nGet git info from git commands","distinct":false,"url":"https://api.github.com/repos/openshift/ovn-kubernetes/commits/d7cd0ef322c5579ec4e446d9ec78198b4e1e8d6e"}]}
{"actor":{"display_login":"openshift-merge-robot"}}