Commit Graph
7310 Commits
Author SHA1 Message Date
Raj Chaudhuri 6365328d04 Documentation updated 2023-07-31 16:29:36 +05:30
Raj Chaudhuri c085ebed05 Build steps for docker plugin added 2023-07-28 13:48:32 +05:30
Raj Chaudhuri 668bbcf4ed Docker and runc dependencies upgraded 2023-07-17 14:08:08 +05:30
Raj Chaudhuri 4b47fc607c Alpine base image upgraded 2023-07-17 11:06:46 +05:30
Raj Chaudhuri cdf761b8a3 Scan results on 2023-07-17 2023-07-17 10:28:18 +05:30
Raj Chaudhuri 559027b4f0 Alpine base image upgraded 2023-03-30 15:31:27 +05:30
Raj Chaudhuri 901e889ace Merge pull request #1 from kingdonb/reweave
Reweave (build on aarch64/macos with Rancher + Buildx)
2023-03-30 13:19:50 +05:30
Kingdon Barrett e84a000b92 multiarch (alpine)
Add one more BUILDPLATFORM as needed for down build
+ x1 more (try again) and it's linux/${TARGETARCH}

I thought that ${TARGETPLATFORM} was a thing according to this blog:
https://www.docker.com/blog/faster-multi-platform-builds-dockerfile-cross-compilation-guide/
but it doesn't seem to be there reliably, whereas ${TARGETARCH} is set.

Signed-off-by: Kingdon Barrett <kingdon@weave.works>
2023-03-29 15:42:12 -04:00
Raj Chaudhuri 88d8bb648f Docker, containerd and runc dependencies upgraded 2023-03-29 12:12:48 +05:30
Raj Chaudhuri 1bb1f02b1d libCNI upgraded to v1.1.2
This was all work done previously by @hswong3i in
https://github.com/weaveworks/weave/pull/3939

All credit to them
2023-03-29 12:10:13 +05:30
Raj Chaudhuri 2f49b8455a github.com/miekg/dns upgraded with code change
It had breaking changes, detailed in the reweave CHANGELOG
2023-03-29 07:20:21 +05:30
Raj Chaudhuri df2240acbd Some vulnerable dependencies upgraded
* golang.org/x/net to v0.8.0
* golang.org/x/crypto to v0.0.0-20220314234659-1baeb1ce4c0b
* github.com/aws/aws-sdk-go to v1.34.0
* github.com/prometheus/client_golang to v1.14.0
* k8s.io/client-go to v0.23.0
2023-03-28 11:44:24 +05:30
Raj Chaudhuri c241c455c5 Go version bumped to 1.20 2023-03-28 10:15:26 +05:30
Raj Chaudhuri 90a5d945c2 New build process created 2023-03-27 23:40:04 +05:30
Raj Chaudhuri 273c611d43 Image security scanning process created 2023-03-27 22:59:38 +05:30
Raj Chaudhuri ee3b7ce368 Old build process documented 2023-03-25 19:56:06 +05:30
Raj Chaudhuri 7140e40477 Reweave begins 2023-03-25 17:09:08 +05:30
Eneko Fernández 8c8476381d Issues/3964 - added how to encrypt traffic (#3965)
* docs - added available properties

* added encryption option

* reworded

* not using password
2022-11-23 10:40:02 +00:00
Eneko FernándezandCiaran Moran 25ccf44179 updated / removed references to weave cloud (#3962)
* updated / removed references to weave cloud

* remove more Weave Cloud references (#3963)

Co-authored-by: Ciaran Moran <ciaran@weave.works>
2022-10-07 15:07:16 +01:00
Eneko Fernández d30828a3f2 updated docs to dont use weave cloud (#3961)
* updated docs to dont use weave cloud

* a better wording for the documentation

* comments from pr

* added manifest without version

* moving to kube without versions

* removed kube manifest
2022-10-04 11:13:21 +01:00
Kingdon Barrett 6d7a29ade6 Merge pull request #3946 from rajch/master
Update docs to include issue with containerd versions <1.6.5
2022-06-09 08:25:21 -04:00
Raj ChaudhuriandKingdon Barrett 1686ded5d5 Apply suggestions from code review
Co-authored-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com>
2022-06-09 17:16:06 +05:30
Raj Chaudhuri 9a5e1e333d Update docs to include possible containerd issue.
If a kubernetes cluster uses the containerd cri, and containerd is
at version 1.6.0 through 1.6.4, weave does not work. This doc
update highlights this and provides a solution, which is to
upgrade containerd.
2022-06-08 10:49:39 +05:30
Daniel Holbach e3712152d2 Merge pull request #3905 from weaveworks/suspend-external-bug-bounty
Suspend bug bounty program
2021-09-01 14:44:27 +02:00
Daniel Holbach 53b12b6c23 Merge pull request #3907 from dholbach/remove-preview-build
Remove preview build
2021-08-31 11:43:02 +02:00
Daniel Holbach 5367e0efb1 Remove preview build
As the Netlify docs preview build wasn't working for a while
	anyway, we stopped them. In this PR I'm removing the relevant
	bits.

	This is the Net equivalent of weaveworks/scope#3879.

Signed-off-by: Daniel Holbach <daniel@weave.works>
2021-07-13 16:18:37 +02:00
Ciaran Moran 77445d0d9e Suspend bug bounty program
Per https://github.com/weaveworks/corp/issues/1780
2021-06-17 10:14:18 +01:00
Daniel Holbach 34de0b10a6 Merge pull request #3889 from dholbach/mention-coc
point out CoC more clearly
2021-02-08 17:44:45 +01:00
Daniel Holbach 344a4835e5 point out CoC more clearly
Signed-off-by: Daniel Holbach <daniel@weave.works>
2021-02-08 14:19:40 +01:00
Bryan Boreham ba64f8e8eb Add release v2.8.1 latest_release v2.8.1 2021-01-25 10:55:30 +00:00
Bryan Boreham 263aecf4ef Merge pull request #3886 from avestuk/add-etc-machine-id-mount
Update daemonset manifest to mount /etc/machine-id
2021-01-22 14:21:16 +00:00
Bryan Boreham f9239c9a44 Merge pull request #3885 from weaveworks/move-k8s-checkpoint
Move Kubernetes API calls into kube-utils program
2021-01-22 12:50:08 +00:00
Alex Vest 9a2682671c Update daemonset manifest to mount /etc/machine-id
Mounted as ReadOnly in order to minimize attack surface as in #3880
2021-01-21 18:00:26 +00:00
Bryan Boreham ad621c807e Move Kubernetes API calls into kube-utils program
This reduces the size of the 'weaver' binary.
2021-01-19 17:22:47 +00:00
Bryan Boreham 164175160a Add release v2.8.0 v2.8.0 2021-01-18 14:51:21 +00:00
Bryan Boreham edd28ab4cb Fix ambiguous cast in dummy value
Go 1.15 picks this up as an error
2021-01-18 14:41:42 +00:00
Bryan Boreham 4368dd5841 Run CI builds using Go 1.15.6 2021-01-18 14:40:57 +00:00
Bryan Boreham 1dfe1f3b98 Merge pull request #3883 from weaveworks/golang-15-6
Update Go to 1.15.6
2021-01-18 14:09:43 +00:00
Bryan Boreham b1651c322a Merge pull request #3882 from weaveworks/3847-sleep-before-ipset-destroy
Workaround to fix ipset conflict with iptables
2021-01-18 14:09:19 +00:00
Bryan Boreham ba6741166d Update Go to 1.15.6 2021-01-18 13:52:39 +00:00
Bryan Boreham 108f0a5c14 Merge pull request #3851 from NeonSludge/fix-ipset-destroy
Pause and retry ipset deletion if it fails the first time
2021-01-18 13:31:58 +00:00
Bryan Boreham b04217d8e6 Merge pull request #3840 from mastappl/patch-1
website: add info about network aliases
2021-01-18 12:36:26 +00:00
KevDG 3ef97f0c7c Workaround to fix ipset conflict with iptables
Sleep before ipset destroy in startup, otherwise the operation can
sometimes fail - see https://github.com/weaveworks/weave/issues/3847
2021-01-18 12:33:54 +00:00
Bryan Boreham e91900cc9e Merge pull request #3880 from weaveworks/init-container
Kubernetes: move kernel and CNI setup to init container

This allows the main container to run without write access to the host filesystem,
except for two specific areas, thus trimming the attack surface.

Also remove manifests for Kubernetes 1.6 and 1.7 to reduce maintenance load -
they are ancient history.
2021-01-14 12:10:25 +00:00
Bryan Boreham fe61992c06 Make launch.sh compatible with older k8s manifests 2021-01-12 15:53:12 +00:00
Bryan Boreham 8eeb3ca4f2 Kubernetes: move part of launch to init container
This allows the main container to run without write access to the host
filesystem, except for two specific areas, thus trimming the attack
surface.

We lose the behaviour that the CNI plugin is only installed if Weave Net
gets up and running at least once, so the error reports from kubelet
will be slightly different in the case that it never manages to run.
2021-01-11 17:54:43 +00:00
Bryan Boreham b7a9947c2f Remove manifests for Kubernetes 1.6 and 1.7
They are ancient history; reduce maintenance load by removing
2021-01-11 14:34:09 +00:00
Bryan Boreham d81e908d1a Merge pull request #3876 from weaveworks/k8s-disable-hostpid
For K8s, stop running in host PID namespace
2020-12-17 16:53:42 +00:00
Bryan Boreham a0ac81b3b4 Stop running in host PID namespace
We shouldn't need this
2020-12-17 12:49:27 +00:00
Bryan Boreham c6d0d140a4 Use newest manifest in k8s tests 2020-12-17 12:49:27 +00:00