reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,300 Commits 7 Branches 85 Tags
2f49b8455a0a47ee2c5b2c7d4b6f9b921fee9e5a
Commit Graph
7300 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Raj Chaudhuri 2f49b8455a github.com/miekg/dns upgraded with code change 
It had breaking changes, detailed in the reweave CHANGELOG
 2023-03-29 07:20:21 +05:30
Raj Chaudhuri df2240acbd Some vulnerable dependencies upgraded 
* golang.org/x/net to v0.8.0
* golang.org/x/crypto to v0.0.0-20220314234659-1baeb1ce4c0b
* github.com/aws/aws-sdk-go to v1.34.0
* github.com/prometheus/client_golang to v1.14.0
* k8s.io/client-go to v0.23.0
 2023-03-28 11:44:24 +05:30
Raj Chaudhuri c241c455c5 Go version bumped to 1.20 2023-03-28 10:15:26 +05:30
Raj Chaudhuri 90a5d945c2 New build process created 2023-03-27 23:40:04 +05:30
Raj Chaudhuri 273c611d43 Image security scanning process created 2023-03-27 22:59:38 +05:30
Raj Chaudhuri ee3b7ce368 Old build process documented 2023-03-25 19:56:06 +05:30
Raj Chaudhuri 7140e40477 Reweave begins 2023-03-25 17:09:08 +05:30
Eneko Fernández 8c8476381d Issues/3964 - added how to encrypt traffic (#3965) 
* docs - added available properties

* added encryption option

* reworded

* not using password
 2022-11-23 10:40:02 +00:00
Eneko FernándezandCiaran Moran 25ccf44179 updated / removed references to weave cloud (#3962) 
* updated / removed references to weave cloud

* remove more Weave Cloud references (#3963)

Co-authored-by: Ciaran Moran <ciaran@weave.works>
 2022-10-07 15:07:16 +01:00
Eneko Fernández d30828a3f2 updated docs to dont use weave cloud (#3961) 
* updated docs to dont use weave cloud

* a better wording for the documentation

* comments from pr

* added manifest without version

* moving to kube without versions

* removed kube manifest
 2022-10-04 11:13:21 +01:00
Kingdon Barrett 6d7a29ade6 Merge pull request #3946 from rajch/master 
Update docs to include issue with containerd versions <1.6.5
 2022-06-09 08:25:21 -04:00
Raj ChaudhuriandKingdon Barrett 1686ded5d5 Apply suggestions from code review 
Co-authored-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com>
 2022-06-09 17:16:06 +05:30
Raj Chaudhuri 9a5e1e333d Update docs to include possible containerd issue. 
If a kubernetes cluster uses the containerd cri, and containerd is
at version 1.6.0 through 1.6.4, weave does not work. This doc
update highlights this and provides a solution, which is to
upgrade containerd.
 2022-06-08 10:49:39 +05:30
Daniel Holbach e3712152d2 Merge pull request #3905 from weaveworks/suspend-external-bug-bounty 
Suspend bug bounty program
 2021-09-01 14:44:27 +02:00
Daniel Holbach 53b12b6c23 Merge pull request #3907 from dholbach/remove-preview-build 
Remove preview build
 2021-08-31 11:43:02 +02:00
Daniel Holbach 5367e0efb1 Remove preview build 
As the Netlify docs preview build wasn't working for a while
	anyway, we stopped them. In this PR I'm removing the relevant
	bits.

	This is the Net equivalent of weaveworks/scope#3879.

Signed-off-by: Daniel Holbach <daniel@weave.works>
 2021-07-13 16:18:37 +02:00
Ciaran Moran 77445d0d9e Suspend bug bounty program 
Per https://github.com/weaveworks/corp/issues/1780
 2021-06-17 10:14:18 +01:00
Daniel Holbach 34de0b10a6 Merge pull request #3889 from dholbach/mention-coc 
point out CoC more clearly
 2021-02-08 17:44:45 +01:00
Daniel Holbach 344a4835e5 point out CoC more clearly 
Signed-off-by: Daniel Holbach <daniel@weave.works>
 2021-02-08 14:19:40 +01:00
Bryan Boreham ba64f8e8eb Add release v2.8.1 latest_release v2.8.1 2021-01-25 10:55:30 +00:00
Bryan Boreham 263aecf4ef Merge pull request #3886 from avestuk/add-etc-machine-id-mount 
Update daemonset manifest to mount /etc/machine-id
 2021-01-22 14:21:16 +00:00
Bryan Boreham f9239c9a44 Merge pull request #3885 from weaveworks/move-k8s-checkpoint 
Move Kubernetes API calls into kube-utils program
 2021-01-22 12:50:08 +00:00
Alex Vest 9a2682671c Update daemonset manifest to mount /etc/machine-id 
Mounted as ReadOnly in order to minimize attack surface as in #3880
 2021-01-21 18:00:26 +00:00
Bryan Boreham ad621c807e Move Kubernetes API calls into kube-utils program 
This reduces the size of the 'weaver' binary.
 2021-01-19 17:22:47 +00:00
Bryan Boreham 164175160a Add release v2.8.0 v2.8.0 2021-01-18 14:51:21 +00:00
Bryan Boreham edd28ab4cb Fix ambiguous cast in dummy value 
Go 1.15 picks this up as an error
 2021-01-18 14:41:42 +00:00
Bryan Boreham 4368dd5841 Run CI builds using Go 1.15.6 2021-01-18 14:40:57 +00:00
Bryan Boreham 1dfe1f3b98 Merge pull request #3883 from weaveworks/golang-15-6 
Update Go to 1.15.6
 2021-01-18 14:09:43 +00:00
Bryan Boreham b1651c322a Merge pull request #3882 from weaveworks/3847-sleep-before-ipset-destroy 
Workaround to fix ipset conflict with iptables
 2021-01-18 14:09:19 +00:00
Bryan Boreham ba6741166d Update Go to 1.15.6 2021-01-18 13:52:39 +00:00
Bryan Boreham 108f0a5c14 Merge pull request #3851 from NeonSludge/fix-ipset-destroy 
Pause and retry ipset deletion if it fails the first time
 2021-01-18 13:31:58 +00:00
Bryan Boreham b04217d8e6 Merge pull request #3840 from mastappl/patch-1 
website: add info about network aliases
 2021-01-18 12:36:26 +00:00
KevDG 3ef97f0c7c Workaround to fix ipset conflict with iptables 
Sleep before ipset destroy in startup, otherwise the operation can
sometimes fail - see https://github.com/weaveworks/weave/issues/3847
 2021-01-18 12:33:54 +00:00
Bryan Boreham e91900cc9e Merge pull request #3880 from weaveworks/init-container 
Kubernetes: move kernel and CNI setup to init container

This allows the main container to run without write access to the host filesystem,
except for two specific areas, thus trimming the attack surface.

Also remove manifests for Kubernetes 1.6 and 1.7 to reduce maintenance load -
they are ancient history.
 2021-01-14 12:10:25 +00:00
Bryan Boreham fe61992c06 Make launch.sh compatible with older k8s manifests 2021-01-12 15:53:12 +00:00
Bryan Boreham 8eeb3ca4f2 Kubernetes: move part of launch to init container 
This allows the main container to run without write access to the host
filesystem, except for two specific areas, thus trimming the attack
surface.

We lose the behaviour that the CNI plugin is only installed if Weave Net
gets up and running at least once, so the error reports from kubelet
will be slightly different in the case that it never manages to run.
 2021-01-11 17:54:43 +00:00
Bryan Boreham b7a9947c2f Remove manifests for Kubernetes 1.6 and 1.7 
They are ancient history; reduce maintenance load by removing
 2021-01-11 14:34:09 +00:00
Bryan Boreham d81e908d1a Merge pull request #3876 from weaveworks/k8s-disable-hostpid 
For K8s, stop running in host PID namespace
 2020-12-17 16:53:42 +00:00
Bryan Boreham a0ac81b3b4 Stop running in host PID namespace 
We shouldn't need this
 2020-12-17 12:49:27 +00:00
Bryan Boreham c6d0d140a4 Use newest manifest in k8s tests 2020-12-17 12:49:27 +00:00
Bryan Boreham 9bb14662e5 Add security policy 2020-12-17 11:52:07 +00:00
Bryan Boreham 240d1b2f2a Merge pull request #3854 from weaveworks/simplify-test-840 
Simplify Kubernetes externalTrafficPolicy:local test
 2020-12-17 11:21:46 +00:00
Bryan Boreham 414cbfb838 Simplify Kubernetes externalTrafficPolicy:local test 
There's no point stopping and starting the daemons now "no-masq-local"
is the default.
 2020-08-27 15:20:04 +00:00
Bryan Boreham fb7fc7ddae Merge pull request #3852 from weaveworks/spurious-egress-drop-logs 
Move egress logging rule beside drop rule
 2020-08-27 16:12:16 +01:00
Bryan Boreham 8c52698222 Move egress logging rule beside drop rule 
Otherwise we might log a blocked connection even though the packet
was not dropped.
 2020-08-26 10:02:32 +00:00
Kirill Buev cb2e56fc44 Pause and retry ipset deletion if it fails the first time 2020-08-24 16:23:52 +03:00
Bryan Boreham 30ce219794 Add release v2.7.0 v2.7.0 2020-08-05 10:38:13 +00:00
Bryan Boreham 911f506b63 Merge pull request #3841 from weaveworks/fail-controller-if-goroutines-fail 
Terminate NPC application if any of the watches panic
 2020-08-05 11:35:49 +01:00
Bryan Boreham 4795ba5807 Show stack-trace from panic in weave-npc 
Rather than exiting silently, fetch the stack trace and print that
for the user to understand what happened.

Exit via existing fatal-error code.
 2020-08-05 09:45:20 +00:00
Bryan Boreham 23a827088b Remove unused stopChan 2020-08-05 09:44:19 +00:00