Commit Graph
7297 Commits
Author SHA1 Message Date
Raj Chaudhuri 90a5d945c2 New build process created 2023-03-27 23:40:04 +05:30
Raj Chaudhuri 273c611d43 Image security scanning process created 2023-03-27 22:59:38 +05:30
Raj Chaudhuri ee3b7ce368 Old build process documented 2023-03-25 19:56:06 +05:30
Raj Chaudhuri 7140e40477 Reweave begins 2023-03-25 17:09:08 +05:30
Eneko Fernández 8c8476381d Issues/3964 - added how to encrypt traffic (#3965)
* docs - added available properties

* added encryption option

* reworded

* not using password
2022-11-23 10:40:02 +00:00
Eneko FernándezandCiaran Moran 25ccf44179 updated / removed references to weave cloud (#3962)
* updated / removed references to weave cloud

* remove more Weave Cloud references (#3963)

Co-authored-by: Ciaran Moran <ciaran@weave.works>
2022-10-07 15:07:16 +01:00
Eneko Fernández d30828a3f2 updated docs to dont use weave cloud (#3961)
* updated docs to dont use weave cloud

* a better wording for the documentation

* comments from pr

* added manifest without version

* moving to kube without versions

* removed kube manifest
2022-10-04 11:13:21 +01:00
Kingdon Barrett 6d7a29ade6 Merge pull request #3946 from rajch/master
Update docs to include issue with containerd versions <1.6.5
2022-06-09 08:25:21 -04:00
Raj ChaudhuriandKingdon Barrett 1686ded5d5 Apply suggestions from code review
Co-authored-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com>
2022-06-09 17:16:06 +05:30
Raj Chaudhuri 9a5e1e333d Update docs to include possible containerd issue.
If a kubernetes cluster uses the containerd cri, and containerd is
at version 1.6.0 through 1.6.4, weave does not work. This doc
update highlights this and provides a solution, which is to
upgrade containerd.
2022-06-08 10:49:39 +05:30
Daniel Holbach e3712152d2 Merge pull request #3905 from weaveworks/suspend-external-bug-bounty
Suspend bug bounty program
2021-09-01 14:44:27 +02:00
Daniel Holbach 53b12b6c23 Merge pull request #3907 from dholbach/remove-preview-build
Remove preview build
2021-08-31 11:43:02 +02:00
Daniel Holbach 5367e0efb1 Remove preview build
As the Netlify docs preview build wasn't working for a while
	anyway, we stopped them. In this PR I'm removing the relevant
	bits.

	This is the Net equivalent of weaveworks/scope#3879.

Signed-off-by: Daniel Holbach <daniel@weave.works>
2021-07-13 16:18:37 +02:00
Ciaran Moran 77445d0d9e Suspend bug bounty program
Per https://github.com/weaveworks/corp/issues/1780
2021-06-17 10:14:18 +01:00
Daniel Holbach 34de0b10a6 Merge pull request #3889 from dholbach/mention-coc
point out CoC more clearly
2021-02-08 17:44:45 +01:00
Daniel Holbach 344a4835e5 point out CoC more clearly
Signed-off-by: Daniel Holbach <daniel@weave.works>
2021-02-08 14:19:40 +01:00
Bryan Boreham ba64f8e8eb Add release v2.8.1 latest_release v2.8.1 2021-01-25 10:55:30 +00:00
Bryan Boreham 263aecf4ef Merge pull request #3886 from avestuk/add-etc-machine-id-mount
Update daemonset manifest to mount /etc/machine-id
2021-01-22 14:21:16 +00:00
Bryan Boreham f9239c9a44 Merge pull request #3885 from weaveworks/move-k8s-checkpoint
Move Kubernetes API calls into kube-utils program
2021-01-22 12:50:08 +00:00
Alex Vest 9a2682671c Update daemonset manifest to mount /etc/machine-id
Mounted as ReadOnly in order to minimize attack surface as in #3880
2021-01-21 18:00:26 +00:00
Bryan Boreham ad621c807e Move Kubernetes API calls into kube-utils program
This reduces the size of the 'weaver' binary.
2021-01-19 17:22:47 +00:00
Bryan Boreham 164175160a Add release v2.8.0 v2.8.0 2021-01-18 14:51:21 +00:00
Bryan Boreham edd28ab4cb Fix ambiguous cast in dummy value
Go 1.15 picks this up as an error
2021-01-18 14:41:42 +00:00
Bryan Boreham 4368dd5841 Run CI builds using Go 1.15.6 2021-01-18 14:40:57 +00:00
Bryan Boreham 1dfe1f3b98 Merge pull request #3883 from weaveworks/golang-15-6
Update Go to 1.15.6
2021-01-18 14:09:43 +00:00
Bryan Boreham b1651c322a Merge pull request #3882 from weaveworks/3847-sleep-before-ipset-destroy
Workaround to fix ipset conflict with iptables
2021-01-18 14:09:19 +00:00
Bryan Boreham ba6741166d Update Go to 1.15.6 2021-01-18 13:52:39 +00:00
Bryan Boreham 108f0a5c14 Merge pull request #3851 from NeonSludge/fix-ipset-destroy
Pause and retry ipset deletion if it fails the first time
2021-01-18 13:31:58 +00:00
Bryan Boreham b04217d8e6 Merge pull request #3840 from mastappl/patch-1
website: add info about network aliases
2021-01-18 12:36:26 +00:00
KevDG 3ef97f0c7c Workaround to fix ipset conflict with iptables
Sleep before ipset destroy in startup, otherwise the operation can
sometimes fail - see https://github.com/weaveworks/weave/issues/3847
2021-01-18 12:33:54 +00:00
Bryan Boreham e91900cc9e Merge pull request #3880 from weaveworks/init-container
Kubernetes: move kernel and CNI setup to init container

This allows the main container to run without write access to the host filesystem,
except for two specific areas, thus trimming the attack surface.

Also remove manifests for Kubernetes 1.6 and 1.7 to reduce maintenance load -
they are ancient history.
2021-01-14 12:10:25 +00:00
Bryan Boreham fe61992c06 Make launch.sh compatible with older k8s manifests 2021-01-12 15:53:12 +00:00
Bryan Boreham 8eeb3ca4f2 Kubernetes: move part of launch to init container
This allows the main container to run without write access to the host
filesystem, except for two specific areas, thus trimming the attack
surface.

We lose the behaviour that the CNI plugin is only installed if Weave Net
gets up and running at least once, so the error reports from kubelet
will be slightly different in the case that it never manages to run.
2021-01-11 17:54:43 +00:00
Bryan Boreham b7a9947c2f Remove manifests for Kubernetes 1.6 and 1.7
They are ancient history; reduce maintenance load by removing
2021-01-11 14:34:09 +00:00
Bryan Boreham d81e908d1a Merge pull request #3876 from weaveworks/k8s-disable-hostpid
For K8s, stop running in host PID namespace
2020-12-17 16:53:42 +00:00
Bryan Boreham a0ac81b3b4 Stop running in host PID namespace
We shouldn't need this
2020-12-17 12:49:27 +00:00
Bryan Boreham c6d0d140a4 Use newest manifest in k8s tests 2020-12-17 12:49:27 +00:00
Bryan Boreham 9bb14662e5 Add security policy 2020-12-17 11:52:07 +00:00
Bryan Boreham 240d1b2f2a Merge pull request #3854 from weaveworks/simplify-test-840
Simplify Kubernetes externalTrafficPolicy:local test
2020-12-17 11:21:46 +00:00
Bryan Boreham 414cbfb838 Simplify Kubernetes externalTrafficPolicy:local test
There's no point stopping and starting the daemons now "no-masq-local"
is the default.
2020-08-27 15:20:04 +00:00
Bryan Boreham fb7fc7ddae Merge pull request #3852 from weaveworks/spurious-egress-drop-logs
Move egress logging rule beside drop rule
2020-08-27 16:12:16 +01:00
Bryan Boreham 8c52698222 Move egress logging rule beside drop rule
Otherwise we might log a blocked connection even though the packet
was not dropped.
2020-08-26 10:02:32 +00:00
Kirill Buev cb2e56fc44 Pause and retry ipset deletion if it fails the first time 2020-08-24 16:23:52 +03:00
Bryan Boreham 30ce219794 Add release v2.7.0 v2.7.0 2020-08-05 10:38:13 +00:00
Bryan Boreham 911f506b63 Merge pull request #3841 from weaveworks/fail-controller-if-goroutines-fail
Terminate NPC application if any of the watches panic
2020-08-05 11:35:49 +01:00
Bryan Boreham 4795ba5807 Show stack-trace from panic in weave-npc
Rather than exiting silently, fetch the stack trace and print that
for the user to understand what happened.

Exit via existing fatal-error code.
2020-08-05 09:45:20 +00:00
Bryan Boreham 23a827088b Remove unused stopChan 2020-08-05 09:44:19 +00:00
naemono 269786abf5 Simply run os.Exit on panic of goroutine 2020-08-05 09:40:02 +00:00
Bryan Boreham 9cf4104de7 Merge pull request #3838 from weaveworks/go1_14_4
Update to Go 1.14.4 and modules; update other dependencies
2020-08-04 18:25:40 +01:00
Bryan Boreham 5f27dbf17c Merge pull request #3756 from weaveworks/issue-3389
Change NO_MASQ_LOCAL option to default ON
2020-08-04 17:42:16 +01:00