reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,687 Commits 7 Branches 85 Tags
fd28740108daeabd320eb4fdb430cfd4022a98e3
Commit Graph
921 Commits
Author SHA1 Message Date
Bryan Boreham fde7dcdde9 Stop collecting addresses in weave script now we do it in Go 2017-02-13 11:30:34 +00:00
Bryan Boreham 39ac1a0037 Collect existing weave addresses at start-up, to avoid a race when 
doing it from the script

Note we need to run weaver in the host pid namespace, so it can search
for existing container IPs. Also now we are firing off sub-processes
it's better to not be PID 1 so Linux doesn't expect us to reap zombies.
 2017-02-10 15:10:02 +00:00
Bryan Boreham 418c256689 Allow traffic to forward off the weave bridge 2017-02-01 15:01:18 +00:00
Martynas Pumputis 07892bff7d Reduce the default MTU 2017-01-31 17:21:01 +00:00
Bryan Boreham 6c251417d5 Update 'docker inspect weavedb' format for Docker 1.10 2017-01-24 17:27:53 +02:00
Lucas Käldström 29eee4e858 Fixing review feedback, adding checksums, etc 2017-01-24 17:24:04 +02:00
Robert Hensing d881f47088 Add partial support for non-FHS host systems 
Fixes weaveworks/weave#2733 partially, where <host>/etc/resolv.conf is not a
symlink
 2017-01-18 23:28:49 +01:00
Bryan Boreham 7d308a4ac5 Wire weaveutil unique-id into weave script 
Also ensure the right host directories are mounted when create-bridge
is called from either the weave script or weave-kube.
 2017-01-11 13:14:35 +00:00
Bryan Boreham e0b90e8f02 Inline single-line function docker_bridge_ip 2016-12-23 12:15:04 +00:00
Bryan Boreham ea014d1362 Reimplement docker_bridge_ip shell pipeline in Go 2016-12-23 12:10:26 +00:00
Bryan Boreham ec21afb426 Unify weave and launch.sh CNI setup 
Test 830 has to run CNI plugin under sudo now
 2016-12-06 11:52:09 +00:00
Adam Harrison f3843a6b18 Merge branch '1.8' 2016-12-06 11:41:45 +00:00
Bryan Boreham 3674808244 Remove weave bridge and associated devices if something goes wrong when creating it 
Otherwise it is left in a half-created state and the user has to run `weave reset` to continue.
 2016-12-05 15:11:47 +00:00
Adam Harrison 6103595b9c Merge branch '1.8' 2016-11-23 10:36:53 +00:00
Adam Harrison 01c436ae15 Merge pull request #2642 from weaveworks/fix-launch-version 
Fix weave-kube launch.sh version usage
 2016-11-23 10:36:16 +00:00
Bryan Boreham 937036aa64 Simplify default version string 2016-11-22 15:43:17 +00:00
Bryan Boreham 317c6ba04c Better value for --ipalloc-range in attach-router 
The previous regex matched a blank --ipalloc-range and the following
parameter, which defeated the whole point of the check.
 2016-11-14 16:11:42 +00:00
Bryan Boreham 1629f4f3f0 Loop round iptables commands on EAGAIN 2016-11-14 12:37:42 +00:00
Bryan Boreham e458c11e66 Weave script calls Go implementation of expose_nat 2016-11-14 12:37:42 +00:00
Adam Harrison d4d54a1ff5 Clean up CNI symlinks from weave-kube 2016-11-04 14:41:34 +00:00
Bryan Boreham 5630a01a8c Implement CNI plugin via weaveutil 2016-11-03 17:42:39 +00:00
Adam Harrison 431b87b94a Merge pull request #2591 from weaveworks/reset-npc 
Have 'weave reset' remove NPC rules
 2016-11-03 15:22:46 +00:00
Bryan Boreham e117a6bd04 Have 'weave reset' remove NPC rules 2016-11-03 14:24:26 +00:00
Bryan Boreham af10cef5f0 Set --status-addr for metrics by default 2016-11-01 17:04:04 +00:00
Adam Harrison 8e739d5240 Log dropped policy controller traffic via NFLOG 
Send blocked NEW connection attempts to NFLOG group 86 for accounting by
the weave-npc process.
 2016-10-14 15:59:15 +01:00
Adam Harrison 6ec21d3a58 Implement --expect-npc flag to create-bridge 
Add a private flag for weave-kube to steer overlay traffic via the
network policy engine chain.
 2016-09-27 09:23:19 +01:00
Matthias Radestock 06a63db4cf Merge branch '1.6' 2016-09-08 12:55:05 +01:00
Bryan Boreham ac4246e1f5 Pass in default subnet when creating 'weave' plugin network. 
New behaviour in Docker 1.12 means it disregards a plugin-supplied
address pool that overlaps an existing route, which causes a hang as
noted in #2469. When we pass in the subnet, Docker believes we really
do want that address range and avoids the hang.
 2016-09-06 12:05:51 +01:00
Martynas Pumputis 17a7391086 Remove unused functions 2016-08-26 10:15:27 +01:00
Adam Harrison ebe4c5b8b7 Merge pull request #2478 from weaveworks/bridge-veth-setup 
Refactor: move bridge veth creation into 'init_bridge'
 2016-08-18 11:31:16 +01:00
Adam Harrison 9fddb827f9 Merge pull request #2442 from weaveworks/cni-setup-fixes 
CNI setup fixes
 2016-08-18 10:55:46 +01:00
Bryan Boreham 3162009325 Refactor: move bridge veth creation into 'init_bridge' 2016-08-17 17:33:34 +01:00
Matthias Radestock cd94dd0088 setup CNI on weave launch[-router] 
not just `setup[-cni]`

Fixes #2435
 2016-08-16 14:18:55 +01:00
Matthias Radestock afc6f49e80 mount CNI_NETNS dir, in case it is some exotic location 
Fixes #2394
 2016-08-16 14:18:28 +01:00
Martynas Pumputis c509b6e5bb Revert "Derive the bridge MAC from concatenated multiple sources" 
This reverts commit c2083cbce0.
 2016-08-15 09:48:55 +01:00
Bryan Boreham c79b6a8bd7 Merge pull request #2460 from weaveworks/issues/2427-detect-peerid-clashes 
Detect and report peer name collisions
 2016-08-12 16:52:56 +01:00
Martynas Pumputis c2083cbce0 Derive the bridge MAC from concatenated multiple sources 
The sources include:

- /etc/machine-id (generated by "systemd-machine-id-setup") or
  /var/lib/dbus/machine-id (generated by "dbus-uuidgen").
- /sys/class/dmi/id/product_uuid.
- /sys/hypervisor/uuid.

The product of the concatenation should produce an unique identifier
which is stable across reboots.
 2016-08-11 12:01:35 +01:00
Adam Harrison 601bda3176 Merge pull request #2457 from weaveworks/issues/2424-weaken-tls-check 
Do not fail launching the proxy if unable to detect a running instance of docker daemon
 2016-08-10 13:58:42 +01:00
Bryan Boreham 0cbf5ca130 Allow 'weave create-bridge', if the user insists. 
For example this is used when setting up CNI for Kubernetes, in
an environment where we know none of the bad consequences apply.
 2016-08-10 10:00:17 +01:00
Matthias Radestock faf5b14d8b make CNI setup work on recent Docker-for-Macs 
Docker for Mac 1.12.0-rc3 (as of beta18) looks for mounted paths on VM
first, and when it doesn't find them there, it assumes they refer to
paths on the Mac OS host. At which point it will complain that the
paths don't exit.

So instead we mount / since that will always exist on the VM. It's
also what we used to do already when launching the router.

Fixes #2434.
 2016-08-04 22:03:39 +01:00
Martynas Pumputis e8d823d66b Do not fail launching the proxy if unable to detect dockerd 2016-07-28 12:53:44 +01:00
Adam Harrison 369852a3a7 Merge pull request #2430 from weaveworks/remove-duplicate-no-dns 
remove duplication of `--no-dns`
 2016-07-18 11:47:48 +01:00
Matthias Radestock 8b5741506d refactor: restore grouping of functions in script 
Recent(ish) changes placed functions in the wrong sections. Fix that
and label the sections more clearly.
 2016-07-11 21:38:07 +01:00
pidster d794b203f7 Adds ipam option to help. 
Fixes https://github.com/weaveworks/weave/issues/2425
 2016-07-07 11:20:00 +00:00
Matthias Radestock 7ec68119a6 remove duplication of --no-dns 
This was harmless, but annoying.
 2016-07-06 23:21:42 +01:00
Matthias Radestock 566ed64607 Merge pull request #2413 from weaveworks/2347-document-host 
document --host

Fixes #2347.
 2016-07-04 10:07:48 +01:00
Bryan Boreham 087d948941 Check that weave router is running before launching plugin 2016-06-30 12:02:52 +01:00
Matthias Radestock 72e92db96e document --host 
and add some broader points about access control early on, since some
users will wonder about that right from the start.

Fixes #2347
 2016-06-29 20:09:02 +01:00
Matthias Radestock 768414534f cosmetic: more logical order of args in usage 2016-06-29 20:00:47 +01:00
Martynas Pumputis 6319860230 Change the order of awsvpc initialization 
We want to setup the necessary arp settings as soon as possible
and before we re-insert DNS entries. Otherwise, the announced
containers might not be reachable.

Also, do not try to reclaim for weave:expose inside populate_router,
because we do expose before calling it.
 2016-06-29 11:15:56 +01:00