Bryan Boreham
92b21ccd44
Merge pull request #3710 from weaveworks/exclude-self
...
Exclude myself when building a list of peers that may need deleted
2019-10-15 08:41:21 +01:00
Bryan Boreham
88cd86a5f2
Add checksum file for s390x qemu binary
2019-10-12 12:45:17 +00:00
Bryan Boreham
b18c88524d
Merge branch '2.5'
2019-10-12 11:10:09 +00:00
Bryan Boreham
90e0c43bf2
Add a note on how to secure the Kubernetes Addon configuration.
...
Original author Vladimir Pouzanov <farcaller@google.com >
2019-10-12 11:08:57 +00:00
Bryan Boreham
4215618177
Merge pull request #3447 from farcaller/patch-1
...
Add a note on how to secure the configuration.
2019-10-12 12:02:46 +01:00
Bryan Boreham
cb5798f94d
Merge pull request #3697 from christian-2/system-node-critical
...
mark pods weave-net with priorityClassName: system-node-critical
2019-10-12 12:00:13 +01:00
Bryan Boreham
4d7f0f5014
Merge pull request #3685 from linux-on-ibm-z/s390x-crossbuild-support
...
Build with Go 1.12.7; Added support for crossbuilding s390x binaries and images
2019-10-10 18:00:23 +01:00
Bryan Boreham
d1ed6c5747
Exclude myself when building a list of peers that may need deleted
...
We already avoid actually doing the delete, but adding this check
stops the program logging that it was thinking about it.
2019-10-10 13:22:20 +00:00
Bryan Boreham
cb8e06c994
Merge branch '2.5'
2019-10-03 16:58:07 +00:00
Bryan Boreham
753c7cce1e
Merge pull request #3705 from weaveworks/buffer-docker-events
...
Use buffered chan to avoid losing docker events
2019-10-03 14:01:14 +01:00
Bryan Boreham
30b2bada28
Merge pull request #3701 from weaveworks/issues/3698-alpine-3-8
...
Bump Alpine version to 3.8
2019-10-02 15:52:06 +01:00
Bryan Boreham
eeec3833a3
Merge pull request #3692 from sidharthsurana/fix-dnspolicy
...
Change the dnsPolicy for the weave-net pods to ClusterFirstWithHostNet
2019-10-02 14:57:27 +01:00
Bryan Boreham
ee47f0c3ee
Use buffered chan to avoid losing docker events
...
Docker imposes a limit that events have to be retrieved within 100ms
or they are dropped on the sending side. Adding buffer space within
the Weave Net process allows those events to be collected from Docker
more quickly.
1024 is an arbitrary number, much higher than we expect to need.
2019-09-30 15:16:24 +00:00
Bryan Boreham
36a2146ed8
Bump Alpine version to 3.8
2019-09-23 18:17:53 +00:00
christian-2
6afedb881c
mark pods weave-net with priorityClassName: system-node-critical
...
* fixes #3691
* `weave-daemonset-k8s-1.11.yaml` is `weave-daemonset-k8s-1.9.yaml` plus `priorityClassName: system-node-critical`
* notice that a Kubernetes cluster created with `kubeadm` has its `kube-proxy`s marked as `system-node-critical` (and several other pods, such as `kube-apiserver` marked as `system-cluster-critical`)
2019-09-04 14:16:46 +02:00
Bryan Boreham
05ab1139db
Merge pull request #3669 from hpdvanwyk/issue-3666
...
Fix incorrect xfrm policy being deleted by ipsec.Destroy().
2019-09-02 11:48:08 +01:00
Sidharth Surana
e90cbf290b
Change the dnsPolicy for the weave-net pods to ClusterFirstWithHostNet
2019-08-30 10:12:57 -07:00
Bryan Boreham
1e0431f6b2
Merge pull request #3674 from weaveworks/weave-daemonset
...
delete weave-daemonset.yaml
2019-08-30 10:25:45 +01:00
Bryan Boreham
9971fc3dac
ÂAdd a note about incompatibility with iptables 1.8
2019-08-29 16:24:07 +00:00
Bryan Boreham
7aa7e3c00d
Merge pull request #3654 from kitt1987/fix-issue-3653
...
Fix iptable rules generated for Ingress NetworkPolicy when both port and IP block specified
2019-08-29 14:46:35 +01:00
Bryan Boreham
a4dd7fa198
Merge branch '2.5'
2019-08-29 13:38:15 +00:00
Bryan Boreham
e2157a5d04
Merge pull request #3676 from hpdvanwyk/issue-3675
...
Do not do ipsec.InitSARemote on a stopped fastDatapathForwarder.
2019-08-29 13:58:37 +01:00
Daniel Holbach
fc199d0df5
Answer how Weave Net works
...
Actually Bryan answered it, when a reader of our website asked.
Signed-off-by: Daniel Holbach <daniel@weave.works >
2019-08-29 12:36:32 +00:00
Bryan Boreham
cc6d10c9b1
Pin busybox version to 1.28 to avoid CI issues
2019-08-29 12:23:25 +00:00
Bryan Boreham
ace2c12608
Merge pull request #3660 from Pensu/daemonset_api
...
Move daemonset API to apps/v1
2019-08-29 13:11:57 +01:00
Bryan Boreham
57c464d60e
Merge pull request #3679 from weaveworks/how-does-it-work
...
Answer how Weave Net works
2019-08-29 12:48:37 +01:00
Daniel Holbach
65b3894a8e
Answer how Weave Net works
...
Actually Bryan answered it, when a reader of our website asked.
Signed-off-by: Daniel Holbach <daniel@weave.works >
2019-08-29 11:47:28 +00:00
Bryan Boreham
77bfa6a7e4
Remove references to weave-daemonset.yaml from release script and docs
2019-08-29 11:37:55 +00:00
Murali Reddy
9d485d0f21
delete weave-daemonset.yaml which predates the manifest weave-daemonset-k8s-1.6/1.7/1.8.yaml
...
naming is counter intutive
2019-08-29 11:37:55 +00:00
Peeyush Gupta
991945081a
Move daemonset API to apps/v1
2019-08-29 13:57:16 +05:30
Bryan Boreham
123762ec8d
Merge pull request #3673 from weaveworks/slack-channel
...
add net-dev as channel to ask question regarding weave-net
2019-08-28 11:13:15 +01:00
Bryan Boreham
b07db6479a
Merge pull request #3655 from tanishq-dubey/master
...
Add tolerations for nodes tainted with NoExecute
2019-08-28 11:11:26 +01:00
Bryan Boreham
d3f62905b7
Merge pull request #3683 from ReillyProcentive/fix-issue-3342
...
Add wrapper script to weave-npc
2019-08-28 11:03:30 +01:00
Bryan Boreham
22b3393cfd
Merge pull request #3689 from weaveworks/3680-pin-busybox
...
Pin busybox version to 1.28 to avoid CI failure in Python test
2019-08-19 14:08:05 +01:00
Bryan Boreham
c8e7dbd600
Pin busybox version to 1.28 to avoid CI issues
2019-08-14 13:59:41 +00:00
Reilly Brogan
ef26b306e4
Forgot to make this change
2019-08-08 14:52:29 -05:00
Reilly Brogan
1588a7259d
add newline
2019-08-08 14:43:48 -05:00
Reilly Brogan
3a92050ebb
Add weave-npc wrapper script
2019-08-08 14:42:56 -05:00
guirish
04c63879b8
Added support for crossbuilding s390x binaries and images
2019-08-07 09:04:05 -04:00
Hendrik van Wyk
96291d1de4
Do not do ipsec.InitSARemote on a stopped fastDatapathForwarder.
...
Fixes 3675
It is possible for ipsec.InitSARemote to be called after ipsec.Destroy.
If an xfrm policy for that source/destination pair exists it will be
updated to the SPI from the Destroyed connection causing IPSEC to stop
working.
2019-07-31 11:17:37 +02:00
Murali Reddy
9090fddd9f
add net-dev as channel to ask question regarding weave-net
...
Fixes #3667
2019-07-31 11:33:10 +05:30
Hendrik van Wyk
5bcd33c930
Fix incorrect xfrm policy being deleted by ipsec.Destroy().
...
Added a check to make sure the xfrm policy has not yet been updated to
a new spi. The ipsec mutex is held at this point so nothing else should
be modifying this policy.
2019-07-26 11:59:11 +02:00
Tanishq Dubey
959d0bf2e2
Add tolerations for nodes tainted with NoExecute
2019-06-30 00:27:57 -04:00
Kitt Hsu
a547d4571c
Fix the source of iptable rules generated for Ingress NetworkPolicy when both port and IP block specified
2019-06-28 15:02:22 +08:00
Bryan Boreham
b05c5f63c8
Merge pull request #3647 from weaveworks/nsselector
...
add support for combination of podSelector and namespaceSelector in network policies
2019-06-14 14:25:02 +01:00
Bryan Boreham
309a85b29c
Merge pull request #3637 from weaveworks/issue-1962
...
resolve inconsistencies detected during ring merge
2019-06-14 14:24:36 +01:00
Murali Reddy
90ccc4a014
use space to check if entry in a range has allocations while doing ring merge
2019-06-07 18:12:35 +05:30
Murali Reddy
a6f2ee5ccc
add seperate match function to matach pod/namespace/namespacedpod selectors
2019-06-07 11:52:40 +05:30
Bryan Boreham
dcadc0f8cc
Merge pull request #3648 from weaveworks/k8s-src-ip
...
Fix the incorrect case #4 in k8s-src-ip.md
2019-06-06 11:04:39 +01:00
Murali Reddy
332808c524
add details of kube-proxy mode iptables/ipvs and falgs
2019-06-06 11:05:25 +05:30