Commits on Nov 28, 2022

1. client: manually cleanup leaked iptables rules …

   This PR adds a secondary path for cleaning up iptables created for an allocation
   when the normal CNI library fails to do so. This typically happens when the state
   of the pause container is unexpected - e.g. deleted out of band from Nomad. Before,
   the iptables rules would be leaked which could lead to unexpected nat routing
   behavior later on (in addition to leaked resources). With this change, we scan
   for the rules created on behalf of the allocation being GC'd and delete them.
   
   Fixes #6385

   

   shoenig committed Nov 28, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 99fb7d6
   • Browse repository at this point

   Copy the full SHA

   99fb7d6 View commit details

   Browse the repository at this point in the history