reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,356 Commits 7 Branches 85 Tags
b060cf30f4db2ef60ccda332d53480e74ab7f0e5
Commit Graph
902 Commits
Author SHA1 Message Date
Adam Harrison d4d54a1ff5 Clean up CNI symlinks from weave-kube 2016-11-04 14:41:34 +00:00
Bryan Boreham 5630a01a8c Implement CNI plugin via weaveutil 2016-11-03 17:42:39 +00:00
Adam Harrison 431b87b94a Merge pull request #2591 from weaveworks/reset-npc 
Have 'weave reset' remove NPC rules
 2016-11-03 15:22:46 +00:00
Bryan Boreham e117a6bd04 Have 'weave reset' remove NPC rules 2016-11-03 14:24:26 +00:00
Bryan Boreham af10cef5f0 Set --status-addr for metrics by default 2016-11-01 17:04:04 +00:00
Adam Harrison 8e739d5240 Log dropped policy controller traffic via NFLOG 
Send blocked NEW connection attempts to NFLOG group 86 for accounting by
the weave-npc process.
 2016-10-14 15:59:15 +01:00
Adam Harrison 6ec21d3a58 Implement --expect-npc flag to create-bridge 
Add a private flag for weave-kube to steer overlay traffic via the
network policy engine chain.
 2016-09-27 09:23:19 +01:00
Matthias Radestock 06a63db4cf Merge branch '1.6' 2016-09-08 12:55:05 +01:00
Bryan Boreham ac4246e1f5 Pass in default subnet when creating 'weave' plugin network. 
New behaviour in Docker 1.12 means it disregards a plugin-supplied
address pool that overlaps an existing route, which causes a hang as
noted in #2469. When we pass in the subnet, Docker believes we really
do want that address range and avoids the hang.
 2016-09-06 12:05:51 +01:00
Martynas Pumputis 17a7391086 Remove unused functions 2016-08-26 10:15:27 +01:00
Adam Harrison ebe4c5b8b7 Merge pull request #2478 from weaveworks/bridge-veth-setup 
Refactor: move bridge veth creation into 'init_bridge'
 2016-08-18 11:31:16 +01:00
Adam Harrison 9fddb827f9 Merge pull request #2442 from weaveworks/cni-setup-fixes 
CNI setup fixes
 2016-08-18 10:55:46 +01:00
Bryan Boreham 3162009325 Refactor: move bridge veth creation into 'init_bridge' 2016-08-17 17:33:34 +01:00
Matthias Radestock cd94dd0088 setup CNI on weave launch[-router] 
not just `setup[-cni]`

Fixes #2435
 2016-08-16 14:18:55 +01:00
Matthias Radestock afc6f49e80 mount CNI_NETNS dir, in case it is some exotic location 
Fixes #2394
 2016-08-16 14:18:28 +01:00
Martynas Pumputis c509b6e5bb Revert "Derive the bridge MAC from concatenated multiple sources" 
This reverts commit c2083cbce0.
 2016-08-15 09:48:55 +01:00
Bryan Boreham c79b6a8bd7 Merge pull request #2460 from weaveworks/issues/2427-detect-peerid-clashes 
Detect and report peer name collisions
 2016-08-12 16:52:56 +01:00
Martynas Pumputis c2083cbce0 Derive the bridge MAC from concatenated multiple sources 
The sources include:

- /etc/machine-id (generated by "systemd-machine-id-setup") or
  /var/lib/dbus/machine-id (generated by "dbus-uuidgen").
- /sys/class/dmi/id/product_uuid.
- /sys/hypervisor/uuid.

The product of the concatenation should produce an unique identifier
which is stable across reboots.
 2016-08-11 12:01:35 +01:00
Adam Harrison 601bda3176 Merge pull request #2457 from weaveworks/issues/2424-weaken-tls-check 
Do not fail launching the proxy if unable to detect a running instance of docker daemon
 2016-08-10 13:58:42 +01:00
Bryan Boreham 0cbf5ca130 Allow 'weave create-bridge', if the user insists. 
For example this is used when setting up CNI for Kubernetes, in
an environment where we know none of the bad consequences apply.
 2016-08-10 10:00:17 +01:00
Matthias Radestock faf5b14d8b make CNI setup work on recent Docker-for-Macs 
Docker for Mac 1.12.0-rc3 (as of beta18) looks for mounted paths on VM
first, and when it doesn't find them there, it assumes they refer to
paths on the Mac OS host. At which point it will complain that the
paths don't exit.

So instead we mount / since that will always exist on the VM. It's
also what we used to do already when launching the router.

Fixes #2434.
 2016-08-04 22:03:39 +01:00
Martynas Pumputis e8d823d66b Do not fail launching the proxy if unable to detect dockerd 2016-07-28 12:53:44 +01:00
Adam Harrison 369852a3a7 Merge pull request #2430 from weaveworks/remove-duplicate-no-dns 
remove duplication of `--no-dns`
 2016-07-18 11:47:48 +01:00
Matthias Radestock 8b5741506d refactor: restore grouping of functions in script 
Recent(ish) changes placed functions in the wrong sections. Fix that
and label the sections more clearly.
 2016-07-11 21:38:07 +01:00
pidster d794b203f7 Adds ipam option to help. 
Fixes https://github.com/weaveworks/weave/issues/2425
 2016-07-07 11:20:00 +00:00
Matthias Radestock 7ec68119a6 remove duplication of --no-dns 
This was harmless, but annoying.
 2016-07-06 23:21:42 +01:00
Matthias Radestock 566ed64607 Merge pull request #2413 from weaveworks/2347-document-host 
document --host

Fixes #2347.
 2016-07-04 10:07:48 +01:00
Bryan Boreham 087d948941 Check that weave router is running before launching plugin 2016-06-30 12:02:52 +01:00
Matthias Radestock 72e92db96e document --host 
and add some broader points about access control early on, since some
users will wonder about that right from the start.

Fixes #2347
 2016-06-29 20:09:02 +01:00
Matthias Radestock 768414534f cosmetic: more logical order of args in usage 2016-06-29 20:00:47 +01:00
Martynas Pumputis 6319860230 Change the order of awsvpc initialization 
We want to setup the necessary arp settings as soon as possible
and before we re-insert DNS entries. Otherwise, the announced
containers might not be reachable.

Also, do not try to reclaim for weave:expose inside populate_router,
because we do expose before calling it.
 2016-06-29 11:15:56 +01:00
Martynas Pumputis 58caf38f07 Fix re-attaching of weave router in awsvpc mode 
In order to re-attach the router and make it work in awsvpc mode,
the following has to be done:

- expose_ip on the router
- adjusting arp settings
- restoring host routes

To detect that we run in awsvpc mode, we inspect cmd parameters
of the weave router instead of GET'ing /ipinfo/tracker. This is so,
because the HTTP server started by the router might not be running
at the time of restoration.
 2016-06-29 11:15:49 +01:00
Matthias Radestock 67fe1e5daf clarify init-peer-count deprecation warning 
Fixes #2355
 2016-06-20 03:54:16 +01:00
Martynas Pumputis 24d9a00f47 Add check-datapath to weaveutil 
The utility is used to check whether a datapath can be created.
 2016-06-20 03:20:46 +01:00
Matthias Radestock e77bf60d34 Merge branch '1.5' 2016-06-17 15:48:33 +01:00
Bryan Boreham 63314beb2a Remove plugin sockets in 'weave reset' 2016-06-17 15:17:13 +01:00
Bryan Boreham 2d0be34a93 Fix check to see if plugin is running 2016-06-17 15:17:13 +01:00
Adam Harrison f4798fadf8 Merge pull request #2374 from weaveworks/issues/1726-plugin-arp 
Perform arp configuration for plugin-connected containers
 2016-06-17 10:19:53 +01:00
Adam Harrison 27e7ec08d4 Observe resolv.conf changes 2016-06-16 16:55:40 +01:00
Bryan Boreham 8bb8f70bb6 Perform arp configuration for plugin-connected containers 2016-06-14 17:53:34 +01:00
Bryan Boreham b32da8d69f Report a couple of options that are incompatible with --awsvpc 2016-06-13 16:53:27 +01:00
Bryan Boreham 5db7a2bae1 Print usage on --help argument to any command 2016-06-09 12:44:37 +00:00
Bryan Boreham c77b2e8fb3 Tell the proxy that multicast is off in awsvpc mode. 
Otherwise it will use the regular weavewait program which wait for the
multicast route to be added.
 2016-06-08 16:44:54 +01:00
Bryan Boreham 37fd54f20b Perform AWSVPC checks for attach in script rather than in weaveutil 2016-06-08 16:44:54 +01:00
Martynas Pumputis fb9b4ddec0 Enable AWSVPC 
This requires the following additional steps:

- Setting proxy_arp on on the bridge, because that's how we do
  the routing (check the comment at the place where we set it on).
- Disable ARP requests queueing, because it introduces unnecessary
  delay for the first ARP request resulting in a high latency of
  the first packet (on t2.micro machines I've encountered ~700ms
  latency). Also, the queue is bounded, so we might risking to drop
  the requests.
 2016-06-08 16:44:54 +01:00
Bryan Boreham 9a17439e2f Warn on 'weave reset' if weave container is not running 2016-06-06 15:46:30 +01:00
Adam Harrison 9b6154cf63 Merge pull request #2331 from weaveworks/issues/2320-plugin-warning 
Augment warning on active plugin endpoints
 2016-06-03 16:17:31 +01:00
Adam Harrison 4b758dd130 Implement weave launch --resume 2016-06-03 13:53:07 +01:00
Adam Harrison 5e03c0fe25 Revert #1967 (container reuse) 2016-06-03 13:53:07 +01:00
Bryan Boreham cbf4a0facd Move warning on plugin active into Go code 2016-06-02 17:19:51 +01:00