Bryan Boreham 8eeb3ca4f2 Kubernetes: move part of launch to init container ...

This allows the main container to run without write access to the host
filesystem, except for two specific areas, thus trimming the attack
surface.

We lose the behaviour that the CNI plugin is only installed if Weave Net
gets up and running at least once, so the error reports from kubelet
will be slightly different in the case that it never manages to run.

2021-01-11 17:54:43 +00:00

..

kube-utils

Update Kubernetes client packages to 0.18.6

2020-08-04 10:11:30 +00:00

net-plugin

Add ability to set log level for net-plugin

2017-12-14 14:19:33 +02:00

sigproxy

…

weave-kube

Kubernetes: move part of launch to init container

2021-01-11 17:54:43 +00:00

weave-npc

Move egress logging rule beside drop rule

2020-08-26 10:02:32 +00:00

weavedb

Add org.opencontainers.image.* labels to Dockerfiles

2018-05-14 11:51:40 +01:00

weaveexec

Add org.opencontainers.image.* labels to Dockerfiles

2018-05-14 11:51:40 +01:00

weaver

Update Kubernetes client packages to 0.18.6

2020-08-04 10:11:30 +00:00

weaveutil

Test container args-parsing code

2018-08-08 13:24:53 +00:00

weavewait

Improve veth name construction; use a constant instead of "ethwe"

2016-05-25 17:34:13 +01:00