reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,026 Commits 7 Branches 85 Tags
c8e7dbd600d3ba970e6f62e54754c5ece9fa42f5
Commit Graph
7026 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Bryan Boreham c8e7dbd600 Pin busybox version to 1.28 to avoid CI issues 2019-08-14 13:59:41 +00:00
Bryan Boreham b05c5f63c8 Merge pull request #3647 from weaveworks/nsselector 
add support for combination of podSelector and namespaceSelector in network policies
 2019-06-14 14:25:02 +01:00
Bryan Boreham 309a85b29c Merge pull request #3637 from weaveworks/issue-1962 
resolve inconsistencies detected during ring merge
 2019-06-14 14:24:36 +01:00
Murali Reddy 90ccc4a014 use space to check if entry in a range has allocations while doing ring merge 2019-06-07 18:12:35 +05:30
Murali Reddy a6f2ee5ccc add seperate match function to matach pod/namespace/namespacedpod selectors 2019-06-07 11:52:40 +05:30
Bryan Boreham dcadc0f8cc Merge pull request #3648 from weaveworks/k8s-src-ip 
Fix the incorrect case #4 in k8s-src-ip.md
 2019-06-06 11:04:39 +01:00
Murali Reddy 332808c524 add details of kube-proxy mode iptables/ipvs and falgs 2019-06-06 11:05:25 +05:30
Murali Reddy db006060e6 Fix the incorrect case #4 in k8s-src-ip.md 
With cluster IP, traffic is masquraded only when --masquerade-all option is specified
or --cluster-cidr is specified and the source is not from the cluster CIDR range

https://github.com/kubernetes/kubernetes/blob/v1.14.2/pkg/proxy/iptables/proxier.go#L842
 2019-06-03 10:20:15 +05:30
Murali Reddy 7a6ba40982 fix unit test failures 2019-05-30 15:58:18 +05:30
Murali Reddy 75e106b667 using an explicti selector set for network policies with both namespace and pod lable selectors 2019-05-30 12:03:28 +05:30
Bryan Boreham b28e2ee384 Merge branch '2.5' 2019-05-29 08:08:41 +00:00
Bryan Boreham 785b6b4584 Merge pull request #3646 from weaveworks/npcdesign 
update weavenpc design document to reflect current design
 2019-05-29 09:08:19 +01:00
Murali Reddy 391613d015 add details of ipset used for ipblock's excpet list 2019-05-29 08:04:23 +00:00
Murali Reddy 7334869134 update weavenpc design document to reflect current design 2019-05-29 08:04:18 +00:00
Murali Reddy bb4f51499d add support for combination of podSelector and namespaceSelector 
in network policies

- enhance selectorSpec to accomodate both pod and namespace selectors
- enhance analysePolicy to handle policies with both selectors

Fixes #3312
 2019-05-28 12:40:39 +05:30
Murali Reddy cc88aa2145 Merge branch '2.5' 2019-05-16 18:11:30 +05:30
Murali Reddy 4b5d827d94 Add release v2.5.2 v2.5.2 2019-05-16 11:42:47 +05:30
Bryan Boreham 802ede1cd3 Merge branch '2.5' 2019-05-14 09:06:15 +00:00
Murali Reddy 5e69e8a7b4 check for allocations in the range that got transffered when its split 2019-05-13 20:02:36 +05:30
Murali Reddy 2d912263b1 add ring debug log during merge() 2019-05-13 12:43:19 +05:30
Bryan Boreham 6e78a34a00 Merge pull request #3638 from weaveworks/pruneowned 
return error in case Weave CNI plug-in fails to perform CmdDel
 2019-05-10 15:32:47 +01:00
Murali Reddy ac9d72875d ignore the error on IPAM delete for the container with 0 addresses 2019-05-10 17:25:58 +05:30
Murali Reddy 51d7f455c9 move code to reset the entry free space from entries.merge() to Ring.Merge() 2019-05-10 17:23:45 +05:30
Murali Reddy 89db74338e during merge we receive update to an entry that ring owns, and has a newer version, set our version to the one received plus one, effectively imposing our existing entry 2019-05-09 16:05:22 +05:30
Bryan Boreham 4c6879679d Merge pull request #3639 from weaveworks/allowegress 
lazily add iptables rule to drop egress traffic from the pods only if network policies are applied
 2019-05-07 14:38:39 +01:00
Bryan Boreham d35f2236e1 Merge pull request #3603 from weaveworks/pmtu-message 
Improve 'expecting PMTU update' message with address
 2019-05-07 14:34:12 +01:00
Bryan Boreham 27848992b1 Merge branch '2.5' 2019-05-07 13:32:55 +00:00
Bryan Boreham 690b6ff2cd Merge pull request #3623 from weaveworks/ensure-cml-initialised 
Avoid panic on nil map in reclaimPeer()
 2019-05-07 14:30:40 +01:00
Murali Reddy ea2084d871 return from further processign networkpolicy if base rule failed to gets created 2019-05-06 16:27:38 +05:30
Bryan Boreham 8a4fc9c02a Fix peer-list fuzz test to re-fetch list when it may be nil 2019-05-03 17:25:36 +00:00
Bryan Boreham 760bc10074 Merge pull request #3629 from weaveworks/issue-3628 
gossip broadcast updated ring on donating a range to other peer
 2019-05-03 16:32:23 +01:00
Bryan Boreham 20d55fe47a Moved 'expecting PMTU' message to debug level 2019-05-03 15:28:44 +00:00
Murali Reddy 4a1fbc7c38 lazily add iptables rule to drop egress traffic from the pods only 
if network policies are applied

does not address #3464 but just avoids the issue atleast for those who
dont use network policies
 2019-05-03 18:40:59 +05:30
Murali Reddy 11c55a3a07 fix lint 2019-05-03 10:55:13 +05:30
Murali Reddy a400d43df7 resolve inconsistencies detected during ring merge 
Fixes #1962
 2019-05-03 10:55:13 +05:30
Bryan Boreham 189cfa995c Merge pull request #3630 from weaveworks/logringupdates 
add debug log for ipam ring and entry updates
 2019-04-30 10:25:39 +01:00
Bryan Boreham 47d8f24e56 Merge pull request #3635 from weaveworks/issue-3632 
bump up the version of entry by large value so that transfer of range takes precedence
 2019-04-30 10:24:53 +01:00
Murali Reddy 4f8fe2c13f gossip broadcast updated rin on donating a range to other peer 
Fixes #3628
 2019-04-26 15:21:23 +05:30
Murali Reddy 873781ab58 bump up the version of entry by large value so that transfer of range 
takes precedence (if there is any conflict in merging entry) over
other operations on the entry that increments the version

Fixes #3612
 2019-04-26 15:15:47 +05:30
Murali Reddy 06e0e6ace0 add debug log for ipam ring and entry updates 
Fixes #3627
 2019-04-09 12:39:16 +05:30
Bryan Boreham eb7ba691ee Fetch storedPeerList after read from Kubernetes 
This avoids a race condition where the peer has added itself to the
list and the annotation since we read storedPeerList.
 2019-04-02 09:11:27 +00:00
Bryan Boreham 15b9b7416a Re-read peers ConfigMap from Kubernetes at start of every reclaim 
A previous reclaim may have left the map set to nil.
 2019-03-26 17:25:34 +00:00
Bryan Boreham 5024270232 Avoid panic on nil map 
It can be set to nil after a failed update; check rather than crashing.
 2019-03-26 17:20:24 +00:00
Bryan Boreham bd24dd7dae Make test harness and comments match Kubernetes behaviour on conflict error 
Kubernetes always returns nil on error; somehow I had the wrong idea
here.
 2019-03-26 17:19:22 +00:00
Bryan Boreham 2c2a074a83 Merge branch '2.5' 2019-03-26 16:49:33 +00:00
Bryan Boreham 698e1b6d87 Improve 'expecting PMTU update' message with address 
Also remove "EMGSIZE" because it looks like an error in the log file.
 2019-02-27 08:49:42 +00:00
Bryan Boreham b248e021ec Merge pull request #3457 from weaveworks/release-process-update 
Update release process doc with minor details
 2019-02-13 12:06:54 +00:00
Bryan Boreham 0d481ef0e9 Merge pull request #3597 from weaveworks/grammaticalChangesToReadme 
small grammatical changes to readme
 2019-02-13 10:51:56 +00:00
Dimitri Mitropoulos 0c2e046c86 makes passive voice more explicit 2019-02-12 15:54:55 -05:00
Dimitri Mitropoulos 21bc724632 breaks long sentence (with dangling subject) into two sentence 
ask yourself: does `enables` refer to `this repository` or `weave net`, and it should become clear that it's unclear at best.  if you take out the parentheticals, it reads:

> This repository contains Weave Net enables you to get started...

breaking into two sentences helps smooth this bumpiness.
 2019-02-12 15:50:29 -05:00