Mike Bryant cbc3d5b04c Don't bypass selector provisioning when not default deny ...

If we have namespaces Source and Destination, and Destination
contains a NetworkPolicy allowing access from Source, we need
to provision the ipsets for Source and add them to relevant
selectors, even though Source is DefaultAllow.

This also fixes an issue where if the Namespace labels are updated,
that would be ignored.

Fixes #3059

2017-07-14 14:45:41 +01:00

..

ipset

Refactor: move logging of ipset entries down to ipset package

2017-05-19 15:17:20 +00:00

iptables

Refactor iptables usage in weave-npc to make it testable

2017-07-14 14:45:41 +01:00

metrics

Change rest of npc to weave common logging

2016-12-13 13:52:48 +00:00

ulogd

SIGKILL ulogd on weave-npc exit

2017-01-11 14:12:01 +00:00

analyser.go

Import from weave-npc repo

2016-11-02 11:28:59 +00:00

betatypes.go

Import from weave-npc repo

2016-11-02 11:28:59 +00:00

constants.go

Let through connections from local pods to non-local pods

2017-05-19 15:17:20 +00:00

controller_test.go

Add regression test for weave-npc race condition

2017-07-14 14:45:41 +01:00

controller.go

Refactor iptables usage in weave-npc to make it testable

2017-07-14 14:45:41 +01:00

json.go

Log objects via JSON for better debugging

2016-12-06 17:40:17 +00:00

namespace.go

Don't bypass selector provisioning when not default deny

2017-07-14 14:45:41 +01:00

rule.go

Refactor iptables usage in weave-npc to make it testable

2017-07-14 14:45:41 +01:00

selector.go

Refactor: move logging of ipset entries down to ipset package

2017-05-19 15:17:20 +00:00

shortname.go

fix(npc): create ipsets with only valid xml characters

2017-05-15 11:20:04 +01:00