Skip to main content

Illumio Segmentation for Kubernetes

Kubelink

Resolved Issues
  • Kubelink: policy service blocked when agent disconnects while receiving policy message (E-117099)

    In some situations, policies stopped being sent due to a policy channel lock after C-VEN disconnected while receiving a policy update.

  • Kubelink: policy service blocked if one agent is not reading policy message (E-116967)

    In some situations, policies stopped being sent after a C-VEN became unresponsive.

  • Kubelink can't save sets because of message size limit (E-116825)

    Policy updates were being interrupted when large policy sets were being sent. The message size has been increased to permit larger policy transmissions .

  • Kubelink: workload events processing is slowed down by policy updates (E-116706)

    The processing of workload events from Kubernetes sometimes became slow when handling thousands of Kubernetes Workloads, or the policy PCE requests were taking too long, or if there was no previous policy version in storage.

  • Kubelink sends wrong workload href in policy ACK request (E-116640)

    In some CLAS-enabled clusters that host large numbers of workloads, the Kubernetes Workloads page showed an old policy apply date. Kubelink incorrectly sent a policy ACK for some Kubernetes Workloads with the host workload URI. The PCE responded with a 406 error, and a "no policy" ACK was stored.