Enable ECS EC2 task networking for Windows tasks by rawahars · Pull Request #2915 · aws/amazon-ecs-agent

Awsvpc windows : Check if the pause image is loaded on the container instance (aws#2498 )

rawahars

authored and

Harsh Rawat

committed

Changes for ENI Watcher in Windows which is used for Interface monitoring. Changes include -

Harsh Rawat

committed

Windows ENI watcher changes : Added Mocks

Harsh Rawat

committed

Windows ENI Watcher changes : Added unit tests

Harsh Rawat

committed

Following changes were made :

Harsh Rawat

committed

Rebase conflict resolution till last commit

Harsh Rawat

committed

Changes to build platform specific CNI plugins

Harsh Rawat

committed

Integration of various components - windows awsvpc

Harsh Rawat

committed

Rebase error resolve

Harsh Rawat

committed

Obtain Primary CIDR of the instance VPC which will be used for generating DNS server address in Windows CNI plugin config

Harsh Rawat

committed

Added comments for the added config and changed name of constant PrimaryIPv4VPCCIDRResourceFormat

Harsh Rawat

committed

Retrieving ENIs name on the instance.

Harsh Rawat

committed

Changes to use vpc-eni plugin for Windows task networking.

Harsh Rawat

committed

Changed cni logfile path for each platform.

Harsh Rawat

committed

Update task eni dependencies before launching a task.

Harsh Rawat

committed

Injecting net.Interfaces mock for getting eni link name.

Harsh Rawat

committed

Retry network namespace setup if it fails.

Harsh Rawat

committed

Added CNI plugin configuration for setting up ecs-bridge endpoint for task IAM roles.

Harsh Rawat

committed

Increase network setup timeout for Windows and protect cleanupNS for concurrent calls.

Harsh Rawat

committed

Rectified scenario when second ENIByMac function call is not initiated.

Harsh Rawat

committed

Introduced a CNI guard interface which is used by Windows to lock the cleanup method.

Harsh Rawat

committed

Invoke additional commands to setup the task network namespace.

Harsh Rawat

committed

Change DockerClientAPI StartContainerExec to accept runtime configuration.

Harsh Rawat

committed

Minor modifications for improving code quality

Harsh Rawat

committed

Refactor namespace command execution and firewall creation methods to a separate interface

Harsh Rawat

committed

Encapsulating execCmdExecutorFn inside the helper struct.

Harsh Rawat

committed

EC2 task networking on Windows: gMSA support, adding additional local routes and IMDS route in the task namespace. (aws#2876 )

rawahars

authored and

Harsh Rawat

committed

EC2 task networking for Windows: Build vpc-eni CNI plugin for Windows (aws#2893 )

rawahars

authored and

Harsh Rawat

committed

Bug fix: Making endpoint name format consistent with vpc-eni plugin

Harsh Rawat

committed

Removed redundant checks for DNS server information

Harsh Rawat

committed

Data validation for CNI Plugin invocation config

Harsh Rawat

committed

Change in implementation design for blocking IMDS.

Harsh Rawat

committed

Added test for the case when IMDS is disabled for the task.

Harsh Rawat

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Enable ECS EC2 task networking for Windows tasks#2915

Commits on Jun 29, 2021

Awsvpc windows : Check if the pause image is loaded on the container instance (aws#2498 )

Changes for ENI Watcher in Windows which is used for Interface monitoring. Changes include -

Windows ENI watcher changes : Added Mocks

Windows ENI Watcher changes : Added unit tests

Following changes were made :

Rebase conflict resolution till last commit

Changes to build platform specific CNI plugins

Integration of various components - windows awsvpc

Rebase error resolve

Obtain Primary CIDR of the instance VPC which will be used for generating DNS server address in Windows CNI plugin config

Added comments for the added config and changed name of constant PrimaryIPv4VPCCIDRResourceFormat

Retrieving ENIs name on the instance.

Changes to use vpc-eni plugin for Windows task networking.

Changed cni logfile path for each platform.

Update task eni dependencies before launching a task.

Injecting net.Interfaces mock for getting eni link name.

Retry network namespace setup if it fails.

Added CNI plugin configuration for setting up ecs-bridge endpoint for task IAM roles.

Increase network setup timeout for Windows and protect cleanupNS for concurrent calls.

Rectified scenario when second ENIByMac function call is not initiated.

Introduced a CNI guard interface which is used by Windows to lock the cleanup method.

Invoke additional commands to setup the task network namespace.

Change DockerClientAPI StartContainerExec to accept runtime configuration.

Minor modifications for improving code quality

Refactor namespace command execution and firewall creation methods to a separate interface

Encapsulating execCmdExecutorFn inside the helper struct.

EC2 task networking on Windows: gMSA support, adding additional local routes and IMDS route in the task namespace. (aws#2876 )

EC2 task networking for Windows: Build vpc-eni CNI plugin for Windows (aws#2893 )

Bug fix: Making endpoint name format consistent with vpc-eni plugin

Removed redundant checks for DNS server information

Data validation for CNI Plugin invocation config

Change in implementation design for blocking IMDS.

Added test for the case when IMDS is disabled for the task.