Bryan Boreham
ebbf3d4244
Add release v2.1.1
2017-11-17 14:17:31 +00:00
Bryan Boreham
ceb36d1891
Typo
2017-11-17 14:15:10 +00:00
Bryan Boreham
4caa850853
Merge pull request #3176 from weaveworks/issues/3175-fix-install
...
Fix 2.1.0 install issues
2017-11-17 14:14:41 +00:00
Bryan Boreham
96cecf1796
Pull images before running inside weaveexec container
...
Now we don't bundle the docker command inside weaveexec, we need to do
an explicit 'docker pull' to ensure the images are there.
Also set the weavedb tag to :latest to remove a warning from docker
2017-11-17 13:51:10 +00:00
Bryan Boreham
51c7af8fb4
Set IMAGE before using it
2017-11-17 13:31:46 +00:00
Bryan Boreham
347466aba2
Add release v2.1.0
2017-11-17 11:10:52 +00:00
Bryan Boreham
bee1c44859
Merge pull request #3173 from weaveworks/reclaim-tweaks
...
Rearrange peer reclaim checks in weave-kube launch script
2017-11-16 17:05:46 +00:00
Bryan Boreham
f07238c8bb
Move info log to after error check
2017-11-16 14:31:40 +00:00
Bryan Boreham
3b499ce27c
Rearrange peer reclaim checks in weave-kube launch script
...
This is to make it behave better on fresh start, and in the case where
the manifest has not been updated to give it permissions.
2017-11-16 14:14:54 +00:00
Bryan Boreham
4dda216398
Merge pull request #3172 from weaveworks/issues/3170-fix-upgrade
...
weave-kube reclaim: check for upgrade case
2017-11-15 17:59:54 +00:00
Bryan Boreham
f0e511510a
Don't print a message on flag not found
2017-11-15 12:35:19 +00:00
Bryan Boreham
570ab0b10b
Avoid deleting persisted data on weave-kube upgrade
...
Add a feature to weaveutil to get and set flags, then use this feature
to mark the DB when this version runs
2017-11-15 11:26:43 +00:00
Bryan Boreham
214cf6cb2e
Flip result code when checking for new peer
...
This avoids mistaking an error condition for the result we should act on
2017-11-15 10:11:02 +00:00
Bryan Boreham
07459f0cec
Merge pull request #3149 from weaveworks/fix-2797-loosing-ipam-ips
...
Fix 2797 on Kubernetes - Cluster goes down because all IPs become unreachable
2017-11-14 15:31:06 +00:00
Brice Fernandes
90f4f7b62c
Add test to ensure that weave recovers unreachable IPs on launch
2017-11-14 14:18:21 +00:00
Brice Fernandes
987ac98fbf
Add up command to integration tests to make launching cluster easier
2017-11-14 14:16:01 +00:00
Brice Fernandes
49ed40a301
Add test function to recover clean output from command run on remote host
2017-11-14 14:16:01 +00:00
Bryan Boreham
c67bc704e1
Temporarily raise kube-peers log level to debug
2017-11-14 14:16:01 +00:00
Bryan Boreham
3501ad45e6
Cope with a Kubernetes node being deleted and coming back
...
Add features to weaver and kube-peers to find the peer name and check
if it is in the list, then in launch.sh delete persisted data if not.
2017-11-14 14:15:31 +00:00
Bryan Boreham
70a13c9c12
Make kube-peers logging consistent and add -log-level flag
...
Also tag kube-peer log messages with "[kube-peers]": in a standard
deployment they end up interspersed with weaver log messages so this
makes it easier to pick them out.
2017-11-14 14:06:34 +00:00
Brice Fernandes
3afb8d3ddf
Add log messages to detect dying peer edge case
2017-11-14 14:06:34 +00:00
Brice Fernandes
fd2f91e2ee
Refactor: Improve naming
2017-11-14 14:06:33 +00:00
Brice Fernandes
cb0c9e5fba
Document: Add file-level docstrings for kube-peers
2017-11-14 14:06:33 +00:00
Brice Fernandes
6a0e39e5ee
Minor refactor for clarity
2017-11-14 14:06:33 +00:00
Bryan Boreham
a552f194b4
Code to reclaim IP address space from removed peers
2017-11-14 14:06:33 +00:00
Bryan Boreham
267bd8b51d
Pseudo-code to clean up dead peers
2017-11-14 14:06:33 +00:00
Brice Fernandes
497dddabc1
Improve config locking by using optimistic locking strategy
...
Loop using jitter until the update succeeds
2017-11-14 14:06:33 +00:00
Bryan Boreham
71b39489da
Maintain a list of peers in a Kubernetes annotation
...
This is prework for a feature which will remove 'dead' peers
2017-11-14 14:06:33 +00:00
Bryan Boreham
ed8d92cfc6
RBAC to read and write ConfigMaps
2017-11-14 14:06:33 +00:00
Bryan Boreham
f431ee289b
Refactor: create config in main function
2017-11-14 14:06:33 +00:00
Martynas Pumputis
7ea82204e0
Merge pull request #3089 from weaveworks/improve-flags
...
Improve flag handling
2017-11-13 17:31:33 +02:00
Bryan Boreham
44692b997c
Merge pull request #3169 from weaveworks/issues/k8s-netpol-testing
...
Extend NetworkPolicy smoke tests
2017-11-13 15:30:48 +00:00
Bryan Boreham
21086a0b2a
Merge branch '2.0'
2017-11-13 12:51:29 +00:00
Bryan Boreham
d7119169df
Add length to log message for too-big DF broadcast frame
2017-11-13 11:06:34 +00:00
Martynas Pumputis
e1eb0a8617
npc: Fix typo
2017-11-13 10:41:45 +02:00
Martynas Pumputis
cacc190764
npc: Extend NetworkPolicy test cases in 840
...
- Add a test case for default allow all ingress traffic.
- Fix misleading comment.
2017-11-13 09:40:07 +02:00
Brice Fernandes
89e5d935a6
Document test runner feature to pick number of hosts
...
Merge pull request #3164 from weaveworks/improve-test-docs
2017-11-09 17:00:31 +00:00
Brice Fernandes
884e1d7a6b
Document test runner feature to pick number of hosts
2017-11-09 15:48:21 +00:00
Bryan Boreham
5b1ca02ecc
Merge pull request #3151 from weaveworks/issues/3105-k8s-17-netpolicies-whitelist
...
Implement Kubernetes 1.7 NetworkPolicy semantics
2017-11-07 16:31:01 +00:00
Martynas Pumputis
f51347feac
npc: Address PR comments
...
* Add comments about presence of `analysePolicyLegacy` and `analysePolicy`.
* Use non-legacy netpol in TestRegressionPolicyNamespaceOrdering3059.
2017-11-07 15:40:58 +02:00
Martynas Pumputis
b605b832ed
npc: Extend k8s NetworkPolicy smoke tests
...
- Test that pods not matching ingress rules are not able to access
the nettest pods.
- Test upgrading of NPC (from legacy to non-legacy).
- Test new semantics of k8s netpol.
2017-11-07 14:55:03 +02:00
Bryan Boreham
e148b72284
Merge branch '2.0'
2017-11-06 11:48:29 +00:00
Bryan Boreham
16db921349
Merge pull request #3128 from weaveworks/k8s-notes
...
Added 'things to watch out for' section in Kubernetes instructions
2017-11-03 10:59:35 +00:00
Bryan Boreham
4c235b3648
Merge pull request #3160 from weaveworks/2017-11-02-update-gopacket
...
Update gopacket to latest master to benefit from memory optimization
2017-11-03 10:32:35 +00:00
Damien Lespiau
1a8d479227
Update gopacket to latest master to benefit from memory optimization
...
Upstream has done some work saving 133k allocated objects on startup (init()),
which translates into a saving of 30-50MB RSS memory.
Details: https://github.com/google/gopacket/pull/377#issuecomment-338984309
2017-11-02 17:07:31 +00:00
Matthias Radestock
7aad364116
Merge pull request #3158 from weaveworks/2.0
...
merge branch 2.0
2017-10-31 08:11:17 +00:00
Matthias Radestock
4958d9e423
Merge pull request #3156 from weaveworks/3153-v2-plugin-dockerhub
...
document using v2 plugin from dockerhub rather than store
Fixes #3153 .
2017-10-31 07:08:50 +00:00
Matthias Radestock
474f1f3673
document using v2 plugin from dockerhub rather than store
...
Since the latter is hard to update and hence frequently out of date.
Fixes #3153 .
2017-10-30 20:43:45 +00:00
Martynas Pumputis
9aa7044f1e
npc: Add unit tests for default-allow ipsets
2017-10-22 19:42:08 +02:00
Martynas Pumputis
7c39f96d08
npc: Implement networking.k8s.io/v1/NetworkPolicy semantics (k8s 1.7)
...
The main difference between new and legacy (pre-1.7) netpol semantics
are the following:
* The DenyDefault ingress isolation annotation is obsoleted.
* Traffic is allowed to a pod if there are no netpol selecting
the pod.
See https://kubernetes.io/docs/api-reference/v1.6/#networkpolicyspec-v1beta1-extensions
vs https://kubernetes.io/docs/api-reference/v1.7/#networkpolicyspec-v1-networking
for more details.
weave-npc can operate either in the legacy or the new mode (default). To
use the legacy, pass "--use-legacy-netpol" arg when starting the npc.
In non-legacy mode we create for each Namespace a default-allow ipset
which stores IP addrs of such Pods which are not selected by any
NetworkPolicy.The ipsets are dst's in rules of the WEAVE-NPC-DEFAULT chain.
2017-10-22 19:37:18 +02:00
Bryan Boreham