Skip to content

Fix/ebpf verifier error#30

Merged
1outres merged 4 commits into
developfrom
fix/ebpf-verifier-error
Jul 17, 2026
Merged

Fix/ebpf verifier error#30
1outres merged 4 commits into
developfrom
fix/ebpf-verifier-error

Conversation

@1outres

@1outres 1outres commented Jul 17, 2026

Copy link
Copy Markdown
Owner

No description provided.

1outres added 4 commits July 17, 2026 11:30
Owning the main RouteTable from the Vpc (blockOwnerDeletion=true) plus
the RouteTable delete guard could deadlock a foreground cascade: the Vpc
lingers with a deletionTimestamp until its owned RouteTable is GC'd, but
the guard refused to release the RouteTable while the Vpc still existed.

Enforce a single delete order in the webhooks instead:
- RouteTable ValidateDelete now allows deleting the main RouteTable once
  the owning Vpc is itself being deleted (deletionTimestamp set), so the
  garbage collector can cascade it.
- Vpc ValidateDelete now blocks deletion while any Subnet still belongs
  to the Vpc, so by the time the Vpc terminates no Subnet references the
  main RouteTable and its Subnet guard is already satisfied.
Conflicts were limited to the compiled BPF objects (*.o), which both
branches had regenerated from divergent source. Resolved by rebuilding
all eBPF artifacts from the merged source via `make -C daemon
generate-bpf`, so the objects reflect both the __u64 loop-counter fix
(acl.h/sg.h) and develop's LoadBalancer dataplane (maps.h/lb.h/
node_ingress.c/pod_egress.c). The generated Go bindings were unchanged
by our side (no struct-layout change) and merged cleanly to develop's.
@1outres
1outres merged commit 91a4c7f into develop Jul 17, 2026
3 checks passed
@1outres
1outres deleted the fix/ebpf-verifier-error branch July 17, 2026 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant