reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,066 Commits 7 Branches 85 Tags
79e032c984cbc0c63b2ee4f3ca6b4bfda832f36e
Commit Graph
7066 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Bryan Boreham 79e032c984 Reduce time test script waits for IPs to be reclaimed 
Now we have a callback when a node is removed, there should be no
reason to wait 90 seconds.

The reclaim does wait up to 5 seconds before starting, so allowing 10
seconds in the script should be sufficient.
 2019-10-11 20:29:58 +00:00
Bryan Boreham 821b787774 Move printing of node addresses after reclaim loop 
Otherwise we see all the node addresses in the middle of the log.
 2019-10-11 20:29:58 +00:00
Bryan Boreham 3ed7894e39 Debug log the node-deletion event 
So we know when it came in, also which node.
 2019-10-11 20:29:58 +00:00
Bryan Boreham 30ed34bd2c Shut down Kubernetes in test of deleted node 2019-10-11 20:29:58 +00:00
Bryan Boreham f5c2f51964 Use a different seed for random numbers each run 
Without this, each run gets the same random numbers so all nodes are
racing to remove the deleted node.
 2019-10-11 20:29:58 +00:00
Bryan Boreham 4d7f0f5014 Merge pull request #3685 from linux-on-ibm-z/s390x-crossbuild-support 
Build with Go 1.12.7; Added support for crossbuilding s390x binaries and images
 2019-10-10 18:00:23 +01:00
Bryan Boreham cb8e06c994 Merge branch '2.5' 2019-10-03 16:58:07 +00:00
Bryan Boreham 753c7cce1e Merge pull request #3705 from weaveworks/buffer-docker-events 
Use buffered chan to avoid losing docker events
 2019-10-03 14:01:14 +01:00
Bryan Boreham 30b2bada28 Merge pull request #3701 from weaveworks/issues/3698-alpine-3-8 
Bump Alpine version to 3.8
 2019-10-02 15:52:06 +01:00
Bryan Boreham eeec3833a3 Merge pull request #3692 from sidharthsurana/fix-dnspolicy 
Change the dnsPolicy for the weave-net pods to ClusterFirstWithHostNet
 2019-10-02 14:57:27 +01:00
Bryan Boreham ee47f0c3ee Use buffered chan to avoid losing docker events 
Docker imposes a limit that events have to be retrieved within 100ms
or they are dropped on the sending side. Adding buffer space within
the Weave Net process allows those events to be collected from Docker
more quickly.

1024 is an arbitrary number, much higher than we expect to need.
 2019-09-30 15:16:24 +00:00
Bryan Boreham 36a2146ed8 Bump Alpine version to 3.8 2019-09-23 18:17:53 +00:00
Bryan Boreham 05ab1139db Merge pull request #3669 from hpdvanwyk/issue-3666 
Fix incorrect xfrm policy being deleted by ipsec.Destroy().
 2019-09-02 11:48:08 +01:00
Sidharth Surana e90cbf290b Change the dnsPolicy for the weave-net pods to ClusterFirstWithHostNet 2019-08-30 10:12:57 -07:00
Bryan Boreham 1e0431f6b2 Merge pull request #3674 from weaveworks/weave-daemonset 
delete weave-daemonset.yaml
 2019-08-30 10:25:45 +01:00
Bryan Boreham 9971fc3dac ÂAdd a note about incompatibility with iptables 1.8 2019-08-29 16:24:07 +00:00
Bryan Boreham 7aa7e3c00d Merge pull request #3654 from kitt1987/fix-issue-3653 
Fix iptable rules generated for Ingress NetworkPolicy when both port and IP block specified
 2019-08-29 14:46:35 +01:00
Bryan Boreham a4dd7fa198 Merge branch '2.5' 2019-08-29 13:38:15 +00:00
Bryan Boreham e2157a5d04 Merge pull request #3676 from hpdvanwyk/issue-3675 
Do not do ipsec.InitSARemote on a stopped fastDatapathForwarder.
 2019-08-29 13:58:37 +01:00
Daniel Holbach fc199d0df5 Answer how Weave Net works 
Actually Bryan answered it, when a reader of our website asked.

Signed-off-by: Daniel Holbach <daniel@weave.works>
 2019-08-29 12:36:32 +00:00
Bryan Boreham cc6d10c9b1 Pin busybox version to 1.28 to avoid CI issues 2019-08-29 12:23:25 +00:00
Bryan Boreham ace2c12608 Merge pull request #3660 from Pensu/daemonset_api 
Move daemonset API to apps/v1
 2019-08-29 13:11:57 +01:00
Bryan Boreham 57c464d60e Merge pull request #3679 from weaveworks/how-does-it-work 
Answer how Weave Net works
 2019-08-29 12:48:37 +01:00
Daniel Holbach 65b3894a8e Answer how Weave Net works 
Actually Bryan answered it, when a reader of our website asked.

Signed-off-by: Daniel Holbach <daniel@weave.works>
 2019-08-29 11:47:28 +00:00
Bryan Boreham 77bfa6a7e4 Remove references to weave-daemonset.yaml from release script and docs 2019-08-29 11:37:55 +00:00
Murali Reddy 9d485d0f21 delete weave-daemonset.yaml which predates the manifest weave-daemonset-k8s-1.6/1.7/1.8.yaml 
naming is counter intutive
 2019-08-29 11:37:55 +00:00
Peeyush Gupta 991945081a Move daemonset API to apps/v1 2019-08-29 13:57:16 +05:30
Bryan Boreham 123762ec8d Merge pull request #3673 from weaveworks/slack-channel 
add net-dev as channel to ask question regarding weave-net
 2019-08-28 11:13:15 +01:00
Bryan Boreham b07db6479a Merge pull request #3655 from tanishq-dubey/master 
Add tolerations for nodes tainted with NoExecute
 2019-08-28 11:11:26 +01:00
Bryan Boreham d3f62905b7 Merge pull request #3683 from ReillyProcentive/fix-issue-3342 
Add wrapper script to weave-npc
 2019-08-28 11:03:30 +01:00
Bryan Boreham 22b3393cfd Merge pull request #3689 from weaveworks/3680-pin-busybox 
Pin busybox version to 1.28 to avoid CI failure in Python test
 2019-08-19 14:08:05 +01:00
Bryan Boreham c8e7dbd600 Pin busybox version to 1.28 to avoid CI issues 2019-08-14 13:59:41 +00:00
Reilly Brogan ef26b306e4 Forgot to make this change 2019-08-08 14:52:29 -05:00
Reilly Brogan 1588a7259d add newline 2019-08-08 14:43:48 -05:00
Reilly Brogan 3a92050ebb Add weave-npc wrapper script 2019-08-08 14:42:56 -05:00
guirish 04c63879b8 Added support for crossbuilding s390x binaries and images 2019-08-07 09:04:05 -04:00
Hendrik van Wyk 96291d1de4 Do not do ipsec.InitSARemote on a stopped fastDatapathForwarder. 
Fixes 3675

It is possible for ipsec.InitSARemote to be called after ipsec.Destroy.
If an xfrm policy for that source/destination pair exists it will be
updated to the SPI from the Destroyed connection causing IPSEC to stop
working.
 2019-07-31 11:17:37 +02:00
Murali Reddy 9090fddd9f add net-dev as channel to ask question regarding weave-net 
Fixes #3667
 2019-07-31 11:33:10 +05:30
Hendrik van Wyk 5bcd33c930 Fix incorrect xfrm policy being deleted by ipsec.Destroy(). 
Added a check to make sure the xfrm policy has not yet been updated to
a new spi. The ipsec mutex is held at this point so nothing else should
be modifying this policy.
 2019-07-26 11:59:11 +02:00
Tanishq Dubey 959d0bf2e2 Add tolerations for nodes tainted with NoExecute 2019-06-30 00:27:57 -04:00
Kitt Hsu a547d4571c Fix the source of iptable rules generated for Ingress NetworkPolicy when both port and IP block specified 2019-06-28 15:02:22 +08:00
Bryan Boreham b05c5f63c8 Merge pull request #3647 from weaveworks/nsselector 
add support for combination of podSelector and namespaceSelector in network policies
 2019-06-14 14:25:02 +01:00
Bryan Boreham 309a85b29c Merge pull request #3637 from weaveworks/issue-1962 
resolve inconsistencies detected during ring merge
 2019-06-14 14:24:36 +01:00
Murali Reddy 90ccc4a014 use space to check if entry in a range has allocations while doing ring merge 2019-06-07 18:12:35 +05:30
Murali Reddy a6f2ee5ccc add seperate match function to matach pod/namespace/namespacedpod selectors 2019-06-07 11:52:40 +05:30
Bryan Boreham dcadc0f8cc Merge pull request #3648 from weaveworks/k8s-src-ip 
Fix the incorrect case #4 in k8s-src-ip.md
 2019-06-06 11:04:39 +01:00
Murali Reddy 332808c524 add details of kube-proxy mode iptables/ipvs and falgs 2019-06-06 11:05:25 +05:30
Murali Reddy db006060e6 Fix the incorrect case #4 in k8s-src-ip.md 
With cluster IP, traffic is masquraded only when --masquerade-all option is specified
or --cluster-cidr is specified and the source is not from the cluster CIDR range

https://github.com/kubernetes/kubernetes/blob/v1.14.2/pkg/proxy/iptables/proxier.go#L842
 2019-06-03 10:20:15 +05:30
Murali Reddy 7a6ba40982 fix unit test failures 2019-05-30 15:58:18 +05:30
Murali Reddy 75e106b667 using an explicti selector set for network policies with both namespace and pod lable selectors 2019-05-30 12:03:28 +05:30