Commits on Nov 9, 2020

1. Make iptables initialization error non fatal …

   In large scale clusters, xtables lock may be hold by kubelet/
   kube-proxy/ portmap for a long time, especially when there are many
   service rules in nat table. antrea-agent may not be able to acquire the
   lock in short time. If the agent blocks on the lock or quit itself, the
   CNI server won't be running, causing all CNI requests to fail.  If the
   Pods' restart policy is Always and there are dead Pods, container
   runtime will keep retrying calling CNIs, during which portmap is called
   first, leading to more xtables lock contention.
   
   This patch makes iptables initialization error non fatal and uses a
   goroutine to retry it until success. The agent will start the CNI server
   anyway and handle the CNI Del requests but won't handle CNI Add requests
   until the network is ready.

   

   tnqn committed Nov 9, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for ed2318e
   • Browse repository at this point

   Copy the full SHA

   ed2318e View commit details

   Browse the repository at this point in the history