Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tag ENIs at creation time #14500

Merged
merged 1 commit into from
Jan 5, 2021
Merged

Tag ENIs at creation time #14500

merged 1 commit into from
Jan 5, 2021

Conversation

ungureanuvladvictor
Copy link
Member

@ungureanuvladvictor ungureanuvladvictor commented Dec 29, 2020

AWS EC2 APIs now support tagging resources at creation time which means
we can remove one extra API call. This is helpful in an environment
where there are a lot of clients to the EC2 API and the server is
rate-limiting.

The downside with this is that now if the client does not have
ec2:CreateTags IAM permissions the full ENI creation will fail with a
403 error code.

Signed-off-by: Vlad Ungureanu [email protected]

@ungureanuvladvictor ungureanuvladvictor added release-note/minor This PR changes functionality that users may find relevant to operating Cilium. area/operator Impacts the cilium-operator component area/eni Impacts ENI based IPAM. integration/cloud Related to integration with cloud environments such as AKS, EKS, GKE, etc. labels Dec 29, 2020
@ungureanuvladvictor ungureanuvladvictor force-pushed the vladu/eni-tagging branch 2 times, most recently from 4bfb235 to 3b56ff2 Compare December 29, 2020 08:37
@ungureanuvladvictor
Copy link
Member Author

test-me-please

@ungureanuvladvictor
Copy link
Member Author

retest-4.9

@maintainer-s-little-helper
Copy link

Commit 1aa0130f5e3dd86a18668d449be5ccd3d538f911 does not contain "Signed-off-by".

Please follow instructions provided in https://docs.cilium.io/en/stable/contributing/development/contributing_guide/#developer-s-certificate-of-origin

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Jan 1, 2021
AWS EC2 APIs now support tagging resources at creation time which means
we can remove one extra API call. This is helpful in an environment
where there are a lot of clients to the EC2 API and the server is
rate-limiting.

The downside with this is that now if the client does not have
ec2:CreateTags IAM permissions the full ENI creation will fail with a
403 error code.

Signed-off-by: Vlad Ungureanu <[email protected]>
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Jan 1, 2021
@ungureanuvladvictor
Copy link
Member Author

test-me-please

@ungureanuvladvictor
Copy link
Member Author

retest-net-next

@qmonnet qmonnet removed their assignment Jan 4, 2021
@pchaigno pchaigno added ready-to-merge This PR has passed all tests and received consensus from code owners to merge. and removed pending-review labels Jan 5, 2021
@maintainer-s-little-helper maintainer-s-little-helper bot removed the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Jan 5, 2021
@pchaigno
Copy link
Member

pchaigno commented Jan 5, 2021

CI is green and all team reviews are in, so merging.

@pchaigno pchaigno merged commit 02bf3ba into master Jan 5, 2021
@pchaigno pchaigno deleted the vladu/eni-tagging branch January 5, 2021 08:28
@christarazi christarazi removed their assignment Jan 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/eni Impacts ENI based IPAM. area/operator Impacts the cilium-operator component integration/cloud Related to integration with cloud environments such as AKS, EKS, GKE, etc. release-note/minor This PR changes functionality that users may find relevant to operating Cilium.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants