Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PR75 updated with Check Support #290

Merged
merged 6 commits into from
Apr 12, 2019
Merged

Conversation

mccv1r0
Copy link
Member

@mccv1r0 mccv1r0 commented Apr 9, 2019

No description provided.

Copy link
Contributor

@bboreham bboreham left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code looks very clean; LGTM!

@squeed squeed added this to the v0.8.0 milestone Apr 10, 2019
dcbw and others added 6 commits April 12, 2019 14:37
…affic

Distros often have additional rules in the their iptabvles 'filter' table
that do things like:

-A FORWARD -j REJECT --reject-with icmp-host-prohibited

docker, for example, gets around this by adding explicit rules to the filter
table's FORWARD chain to allow traffic from the docker0 interface.  Do that
for a given host interface too, as a chained plugin.
Example of usage, which uses flannel for allocating IP
addresses for containers and then registers them in `trusted`
zone in firewalld:

{
  "cniVersion": "0.3.1",
  "name": "flannel-firewalld",
  "plugins": [
    {
      "name": "cbr0",
      "type": "flannel",
      "delegate": {
        "isDefaultGateway": true
      }
    },
    {
      "type": "firewall",
      "backend": "firewalld",
      "zone": "trusted"
    }
  ]
}

Fixes containernetworking#114

Signed-off-by: Alban Crequy <[email protected]>
Signed-off-by: Michal Rostecki <[email protected]>
@dcbw
Copy link
Member

dcbw commented Apr 12, 2019

/lgtm

@dcbw dcbw merged commit 6733d30 into containernetworking:master Apr 12, 2019
@vadorovsky
Copy link
Contributor

Nice, we finally made it. 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants