mirror of https://github.com/kubernetes/kops.git
Update Calico and Canal to v3.12.0
This commit is contained in:
parent
e07f84708e
commit
f218f0bd7a
|
@ -2460,7 +2460,7 @@ spec:
|
||||||
type: string
|
type: string
|
||||||
iptablesBackend:
|
iptablesBackend:
|
||||||
description: 'IptablesBackend controls which variant of iptables
|
description: 'IptablesBackend controls which variant of iptables
|
||||||
binary Felix uses Default: Legacy (other options: NFT)'
|
binary Felix uses Default: Auto (other options: Legacy, NFT)'
|
||||||
type: string
|
type: string
|
||||||
logSeverityScreen:
|
logSeverityScreen:
|
||||||
description: 'LogSeverityScreen lets us set the desired log
|
description: 'LogSeverityScreen lets us set the desired log
|
||||||
|
@ -2529,7 +2529,7 @@ spec:
|
||||||
type: boolean
|
type: boolean
|
||||||
iptablesBackend:
|
iptablesBackend:
|
||||||
description: 'IptablesBackend controls which variant of iptables
|
description: 'IptablesBackend controls which variant of iptables
|
||||||
binary Felix uses Default: Legacy (other options: NFT)'
|
binary Felix uses Default: Auto (other options: Legacy, NFT)'
|
||||||
type: string
|
type: string
|
||||||
logSeveritySys:
|
logSeveritySys:
|
||||||
description: 'LogSeveritySys the severity to set for logs which
|
description: 'LogSeveritySys the severity to set for logs which
|
||||||
|
|
|
@ -118,7 +118,7 @@ type CalicoNetworkingSpec struct {
|
||||||
// MajorVersion is the version of Calico to use
|
// MajorVersion is the version of Calico to use
|
||||||
MajorVersion string `json:"majorVersion,omitempty"`
|
MajorVersion string `json:"majorVersion,omitempty"`
|
||||||
// IptablesBackend controls which variant of iptables binary Felix uses
|
// IptablesBackend controls which variant of iptables binary Felix uses
|
||||||
// Default: Legacy (other options: NFT)
|
// Default: Auto (other options: Legacy, NFT)
|
||||||
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
||||||
// IPIPMode is mode for CALICO_IPV4POOL_IPIP
|
// IPIPMode is mode for CALICO_IPV4POOL_IPIP
|
||||||
IPIPMode string `json:"ipipMode,omitempty"`
|
IPIPMode string `json:"ipipMode,omitempty"`
|
||||||
|
@ -146,7 +146,7 @@ type CanalNetworkingSpec struct {
|
||||||
// default ACCEPT traffic rules to the iptables FORWARD chain
|
// default ACCEPT traffic rules to the iptables FORWARD chain
|
||||||
DisableFlannelForwardRules bool `json:"disableFlannelForwardRules,omitempty"`
|
DisableFlannelForwardRules bool `json:"disableFlannelForwardRules,omitempty"`
|
||||||
// IptablesBackend controls which variant of iptables binary Felix uses
|
// IptablesBackend controls which variant of iptables binary Felix uses
|
||||||
// Default: Legacy (other options: NFT)
|
// Default: Auto (other options: Legacy, NFT)
|
||||||
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
||||||
// LogSeveritySys the severity to set for logs which are sent to syslog
|
// LogSeveritySys the severity to set for logs which are sent to syslog
|
||||||
// Default: INFO (other options: DEBUG, WARNING, ERROR, CRITICAL, NONE)
|
// Default: INFO (other options: DEBUG, WARNING, ERROR, CRITICAL, NONE)
|
||||||
|
|
|
@ -118,7 +118,7 @@ type CalicoNetworkingSpec struct {
|
||||||
// MajorVersion is the version of Calico to use
|
// MajorVersion is the version of Calico to use
|
||||||
MajorVersion string `json:"majorVersion,omitempty"`
|
MajorVersion string `json:"majorVersion,omitempty"`
|
||||||
// IptablesBackend controls which variant of iptables binary Felix uses
|
// IptablesBackend controls which variant of iptables binary Felix uses
|
||||||
// Default: Legacy (other options: NFT)
|
// Default: Auto (other options: Legacy, NFT)
|
||||||
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
||||||
// IPIPMode is mode for CALICO_IPV4POOL_IPIP
|
// IPIPMode is mode for CALICO_IPV4POOL_IPIP
|
||||||
IPIPMode string `json:"ipipMode,omitempty"`
|
IPIPMode string `json:"ipipMode,omitempty"`
|
||||||
|
@ -146,7 +146,7 @@ type CanalNetworkingSpec struct {
|
||||||
// default ACCEPT traffic rules to the iptables FORWARD chain
|
// default ACCEPT traffic rules to the iptables FORWARD chain
|
||||||
DisableFlannelForwardRules bool `json:"disableFlannelForwardRules,omitempty"`
|
DisableFlannelForwardRules bool `json:"disableFlannelForwardRules,omitempty"`
|
||||||
// IptablesBackend controls which variant of iptables binary Felix uses
|
// IptablesBackend controls which variant of iptables binary Felix uses
|
||||||
// Default: Legacy (other options: NFT)
|
// Default: Auto (other options: Legacy, NFT)
|
||||||
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
||||||
// LogSeveritySys the severity to set for logs which are sent to syslog
|
// LogSeveritySys the severity to set for logs which are sent to syslog
|
||||||
// Default: INFO (other options: DEBUG, WARNING, ERROR, CRITICAL, NONE)
|
// Default: INFO (other options: DEBUG, WARNING, ERROR, CRITICAL, NONE)
|
||||||
|
|
|
@ -118,7 +118,7 @@ type CalicoNetworkingSpec struct {
|
||||||
// MajorVersion is the version of Calico to use
|
// MajorVersion is the version of Calico to use
|
||||||
MajorVersion string `json:"majorVersion,omitempty"`
|
MajorVersion string `json:"majorVersion,omitempty"`
|
||||||
// IptablesBackend controls which variant of iptables binary Felix uses
|
// IptablesBackend controls which variant of iptables binary Felix uses
|
||||||
// Default: Legacy (other options: NFT)
|
// Default: Auto (other options: Legacy, NFT)
|
||||||
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
||||||
// IPIPMode is mode for CALICO_IPV4POOL_IPIP
|
// IPIPMode is mode for CALICO_IPV4POOL_IPIP
|
||||||
IPIPMode string `json:"ipipMode,omitempty"`
|
IPIPMode string `json:"ipipMode,omitempty"`
|
||||||
|
@ -146,7 +146,7 @@ type CanalNetworkingSpec struct {
|
||||||
// default ACCEPT traffic rules to the iptables FORWARD chain
|
// default ACCEPT traffic rules to the iptables FORWARD chain
|
||||||
DisableFlannelForwardRules bool `json:"disableFlannelForwardRules,omitempty"`
|
DisableFlannelForwardRules bool `json:"disableFlannelForwardRules,omitempty"`
|
||||||
// IptablesBackend controls which variant of iptables binary Felix uses
|
// IptablesBackend controls which variant of iptables binary Felix uses
|
||||||
// Default: Legacy (other options: NFT)
|
// Default: Auto (other options: Legacy, NFT)
|
||||||
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
IptablesBackend string `json:"iptablesBackend,omitempty"`
|
||||||
// LogSeveritySys the severity to set for logs which are sent to syslog
|
// LogSeveritySys the severity to set for logs which are sent to syslog
|
||||||
// Default: INFO (other options: DEBUG, WARNING, ERROR, CRITICAL, NONE)
|
// Default: INFO (other options: DEBUG, WARNING, ERROR, CRITICAL, NONE)
|
||||||
|
|
|
@ -1,10 +1,6 @@
|
||||||
# Canal Version v3.7.4
|
# Pulled and modified from: https://docs.projectcalico.org/v3.7/manifests/canal.yaml
|
||||||
# https://docs.projectcalico.org/v3.7/release-notes/#v374
|
|
||||||
# This manifest includes the following component versions:
|
|
||||||
# calico/node:v3.7.4
|
|
||||||
# calico/cni:v3.7.4
|
|
||||||
# coreos/flannel:v0.11.0
|
|
||||||
|
|
||||||
|
---
|
||||||
# Source: calico/templates/calico-config.yaml
|
# Source: calico/templates/calico-config.yaml
|
||||||
# This ConfigMap is used to configure a self-hosted Canal installation.
|
# This ConfigMap is used to configure a self-hosted Canal installation.
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
|
@ -411,7 +407,7 @@ spec:
|
||||||
# This container installs the Calico CNI binaries
|
# This container installs the Calico CNI binaries
|
||||||
# and CNI network config file on each node.
|
# and CNI network config file on each node.
|
||||||
- name: install-cni
|
- name: install-cni
|
||||||
image: calico/cni:v3.7.4
|
image: calico/cni:v3.7.5
|
||||||
command: ["/install-cni.sh"]
|
command: ["/install-cni.sh"]
|
||||||
env:
|
env:
|
||||||
# Name of the CNI config file to create.
|
# Name of the CNI config file to create.
|
||||||
|
@ -447,7 +443,7 @@ spec:
|
||||||
# container programs network policy and routes on each
|
# container programs network policy and routes on each
|
||||||
# host.
|
# host.
|
||||||
- name: calico-node
|
- name: calico-node
|
||||||
image: calico/node:v3.7.4
|
image: calico/node:v3.7.5
|
||||||
env:
|
env:
|
||||||
# Use Kubernetes API as the backing datastore.
|
# Use Kubernetes API as the backing datastore.
|
||||||
- name: DATASTORE_TYPE
|
- name: DATASTORE_TYPE
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
{{- /* Pulled and modified from: https://docs.projectcalico.org/v3.10/manifests/canal.yaml */ -}}
|
# Pulled and modified from: https://docs.projectcalico.org/v3.12/manifests/canal.yaml
|
||||||
|
|
||||||
---
|
---
|
||||||
# Source: calico/templates/calico-config.yaml
|
# Source: calico/templates/calico-config.yaml
|
||||||
|
@ -57,6 +57,10 @@ data:
|
||||||
"type": "portmap",
|
"type": "portmap",
|
||||||
"snat": true,
|
"snat": true,
|
||||||
"capabilities": {"portMappings": true}
|
"capabilities": {"portMappings": true}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "bandwidth",
|
||||||
|
"capabilities": {"bandwidth": true}
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
@ -531,7 +535,7 @@ spec:
|
||||||
cluster-autoscaler.kubernetes.io/safe-to-evict: 'true'
|
cluster-autoscaler.kubernetes.io/safe-to-evict: 'true'
|
||||||
spec:
|
spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
beta.kubernetes.io/os: linux
|
kubernetes.io/os: linux
|
||||||
kubernetes.io/role: master
|
kubernetes.io/role: master
|
||||||
hostNetwork: true
|
hostNetwork: true
|
||||||
tolerations:
|
tolerations:
|
||||||
|
@ -548,7 +552,7 @@ spec:
|
||||||
securityContext:
|
securityContext:
|
||||||
fsGroup: 65534
|
fsGroup: 65534
|
||||||
containers:
|
containers:
|
||||||
- image: calico/typha:v3.10.2
|
- image: calico/typha:v3.12.0
|
||||||
name: calico-typha
|
name: calico-typha
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 5473
|
- containerPort: 5473
|
||||||
|
@ -645,7 +649,7 @@ spec:
|
||||||
scheduler.alpha.kubernetes.io/critical-pod: ''
|
scheduler.alpha.kubernetes.io/critical-pod: ''
|
||||||
spec:
|
spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
beta.kubernetes.io/os: linux
|
kubernetes.io/os: linux
|
||||||
hostNetwork: true
|
hostNetwork: true
|
||||||
tolerations:
|
tolerations:
|
||||||
# Make sure canal gets scheduled on all nodes.
|
# Make sure canal gets scheduled on all nodes.
|
||||||
|
@ -665,7 +669,7 @@ spec:
|
||||||
# This container installs the CNI binaries
|
# This container installs the CNI binaries
|
||||||
# and CNI network config file on each node.
|
# and CNI network config file on each node.
|
||||||
- name: install-cni
|
- name: install-cni
|
||||||
image: calico/cni:v3.10.2
|
image: calico/cni:v3.12.0
|
||||||
command: ["/install-cni.sh"]
|
command: ["/install-cni.sh"]
|
||||||
env:
|
env:
|
||||||
# Name of the CNI config file to create.
|
# Name of the CNI config file to create.
|
||||||
|
@ -696,19 +700,23 @@ spec:
|
||||||
name: cni-bin-dir
|
name: cni-bin-dir
|
||||||
- mountPath: /host/etc/cni/net.d
|
- mountPath: /host/etc/cni/net.d
|
||||||
name: cni-net-dir
|
name: cni-net-dir
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
# Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
|
# Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
|
||||||
# to communicate with Felix over the Policy Sync API.
|
# to communicate with Felix over the Policy Sync API.
|
||||||
- name: flexvol-driver
|
- name: flexvol-driver
|
||||||
image: calico/pod2daemon-flexvol:v3.10.2
|
image: calico/pod2daemon-flexvol:v3.12.0
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: flexvol-driver-host
|
- name: flexvol-driver-host
|
||||||
mountPath: /host/driver
|
mountPath: /host/driver
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
containers:
|
containers:
|
||||||
# Runs canal container on each Kubernetes node. This
|
# Runs canal container on each Kubernetes node. This
|
||||||
# container programs network policy and routes on each
|
# container programs network policy and routes on each
|
||||||
# host.
|
# host.
|
||||||
- name: calico-node
|
- name: calico-node
|
||||||
image: calico/node:v3.10.2
|
image: calico/node:v3.12.0
|
||||||
env:
|
env:
|
||||||
# Use Kubernetes API as the backing datastore.
|
# Use Kubernetes API as the backing datastore.
|
||||||
- name: DATASTORE_TYPE
|
- name: DATASTORE_TYPE
|
||||||
|
@ -739,6 +747,9 @@ spec:
|
||||||
- name: CLUSTER_TYPE
|
- name: CLUSTER_TYPE
|
||||||
# was value: "k8s,bgp"
|
# was value: "k8s,bgp"
|
||||||
value: "k8s,canal"
|
value: "k8s,canal"
|
||||||
|
# Period, in seconds, at which felix re-applies all iptables state
|
||||||
|
- name: FELIX_IPTABLESREFRESHINTERVAL
|
||||||
|
value: "60"
|
||||||
# No IP address needed.
|
# No IP address needed.
|
||||||
- name: IP
|
- name: IP
|
||||||
value: ""
|
value: ""
|
||||||
|
@ -769,10 +780,7 @@ spec:
|
||||||
value: "{{- or .Networking.Canal.ChainInsertMode "insert" }}"
|
value: "{{- or .Networking.Canal.ChainInsertMode "insert" }}"
|
||||||
# Set Felix iptables binary variant, Legacy or NFT
|
# Set Felix iptables binary variant, Legacy or NFT
|
||||||
- name: FELIX_IPTABLESBACKEND
|
- name: FELIX_IPTABLESBACKEND
|
||||||
value: "{{- or .Networking.Canal.IptablesBackend "Legacy" }}"
|
value: "{{- or .Networking.Canal.IptablesBackend "Auto" }}"
|
||||||
# Period, in seconds, at which felix re-applies all iptables state
|
|
||||||
- name: FELIX_IPTABLESREFRESHINTERVAL
|
|
||||||
value: "60"
|
|
||||||
# Set to enable the experimental Prometheus metrics server
|
# Set to enable the experimental Prometheus metrics server
|
||||||
- name: FELIX_PROMETHEUSMETRICSENABLED
|
- name: FELIX_PROMETHEUSMETRICSENABLED
|
||||||
value: "{{- or .Networking.Canal.PrometheusMetricsEnabled "false" }}"
|
value: "{{- or .Networking.Canal.PrometheusMetricsEnabled "false" }}"
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
|
||||||
# Pulled and modified from: https://docs.projectcalico.org/v3.9/manifests/calico-typha.yaml
|
# Pulled and modified from: https://docs.projectcalico.org/v3.9/manifests/calico-typha.yaml
|
||||||
|
|
||||||
|
---
|
||||||
# Source: calico/templates/calico-config.yaml
|
# Source: calico/templates/calico-config.yaml
|
||||||
# This ConfigMap is used to configure a self-hosted Calico installation.
|
# This ConfigMap is used to configure a self-hosted Calico installation.
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
|
@ -578,7 +578,7 @@ spec:
|
||||||
serviceAccountName: calico-node
|
serviceAccountName: calico-node
|
||||||
priorityClassName: system-cluster-critical
|
priorityClassName: system-cluster-critical
|
||||||
containers:
|
containers:
|
||||||
- image: calico/typha:v3.9.3
|
- image: calico/typha:v3.9.5
|
||||||
name: calico-typha
|
name: calico-typha
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 5473
|
- containerPort: 5473
|
||||||
|
@ -694,7 +694,7 @@ spec:
|
||||||
# It can be deleted if this is a fresh installation, or if you have already
|
# It can be deleted if this is a fresh installation, or if you have already
|
||||||
# upgraded to use calico-ipam.
|
# upgraded to use calico-ipam.
|
||||||
- name: upgrade-ipam
|
- name: upgrade-ipam
|
||||||
image: calico/cni:v3.9.3
|
image: calico/cni:v3.9.5
|
||||||
command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
|
command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
|
||||||
env:
|
env:
|
||||||
- name: KUBERNETES_NODE_NAME
|
- name: KUBERNETES_NODE_NAME
|
||||||
|
@ -714,7 +714,7 @@ spec:
|
||||||
# This container installs the CNI binaries
|
# This container installs the CNI binaries
|
||||||
# and CNI network config file on each node.
|
# and CNI network config file on each node.
|
||||||
- name: install-cni
|
- name: install-cni
|
||||||
image: calico/cni:v3.9.3
|
image: calico/cni:v3.9.5
|
||||||
command: ["/install-cni.sh"]
|
command: ["/install-cni.sh"]
|
||||||
env:
|
env:
|
||||||
# Name of the CNI config file to create.
|
# Name of the CNI config file to create.
|
||||||
|
@ -748,7 +748,7 @@ spec:
|
||||||
# Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
|
# Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
|
||||||
# to communicate with Felix over the Policy Sync API.
|
# to communicate with Felix over the Policy Sync API.
|
||||||
- name: flexvol-driver
|
- name: flexvol-driver
|
||||||
image: calico/pod2daemon-flexvol:v3.9.3
|
image: calico/pod2daemon-flexvol:v3.9.5
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: flexvol-driver-host
|
- name: flexvol-driver-host
|
||||||
mountPath: /host/driver
|
mountPath: /host/driver
|
||||||
|
@ -757,7 +757,7 @@ spec:
|
||||||
# container programs network policy and routes on each
|
# container programs network policy and routes on each
|
||||||
# host.
|
# host.
|
||||||
- name: calico-node
|
- name: calico-node
|
||||||
image: calico/node:v3.9.3
|
image: calico/node:v3.9.5
|
||||||
env:
|
env:
|
||||||
# Use Kubernetes API as the backing datastore.
|
# Use Kubernetes API as the backing datastore.
|
||||||
- name: DATASTORE_TYPE
|
- name: DATASTORE_TYPE
|
||||||
|
@ -959,7 +959,7 @@ spec:
|
||||||
priorityClassName: system-cluster-critical
|
priorityClassName: system-cluster-critical
|
||||||
containers:
|
containers:
|
||||||
- name: calico-kube-controllers
|
- name: calico-kube-controllers
|
||||||
image: calico/kube-controllers:v3.9.3
|
image: calico/kube-controllers:v3.9.5
|
||||||
env:
|
env:
|
||||||
# Choose which controllers to run.
|
# Choose which controllers to run.
|
||||||
- name: ENABLED_CONTROLLERS
|
- name: ENABLED_CONTROLLERS
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
{{- /* Pulled and modified from: https://docs.projectcalico.org/v3.10/manifests/calico-typha.yaml */ -}}
|
# Pulled and modified from: https://docs.projectcalico.org/v3.12/manifests/calico-typha.yaml
|
||||||
|
|
||||||
---
|
---
|
||||||
# Source: calico/templates/calico-config.yaml
|
# Source: calico/templates/calico-config.yaml
|
||||||
|
@ -50,6 +50,10 @@ data:
|
||||||
"type": "portmap",
|
"type": "portmap",
|
||||||
"snat": true,
|
"snat": true,
|
||||||
"capabilities": {"portMappings": true}
|
"capabilities": {"portMappings": true}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "bandwidth",
|
||||||
|
"capabilities": {"bandwidth": true}
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
@ -567,7 +571,7 @@ spec:
|
||||||
cluster-autoscaler.kubernetes.io/safe-to-evict: 'true'
|
cluster-autoscaler.kubernetes.io/safe-to-evict: 'true'
|
||||||
spec:
|
spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
beta.kubernetes.io/os: linux
|
kubernetes.io/os: linux
|
||||||
kubernetes.io/role: master
|
kubernetes.io/role: master
|
||||||
hostNetwork: true
|
hostNetwork: true
|
||||||
tolerations:
|
tolerations:
|
||||||
|
@ -584,7 +588,7 @@ spec:
|
||||||
securityContext:
|
securityContext:
|
||||||
fsGroup: 65534
|
fsGroup: 65534
|
||||||
containers:
|
containers:
|
||||||
- image: calico/typha:v3.10.2
|
- image: calico/typha:v3.12.0
|
||||||
name: calico-typha
|
name: calico-typha
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 5473
|
- containerPort: 5473
|
||||||
|
@ -681,7 +685,7 @@ spec:
|
||||||
scheduler.alpha.kubernetes.io/critical-pod: ''
|
scheduler.alpha.kubernetes.io/critical-pod: ''
|
||||||
spec:
|
spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
beta.kubernetes.io/os: linux
|
kubernetes.io/os: linux
|
||||||
hostNetwork: true
|
hostNetwork: true
|
||||||
tolerations:
|
tolerations:
|
||||||
# Make sure calico-node gets scheduled on all nodes.
|
# Make sure calico-node gets scheduled on all nodes.
|
||||||
|
@ -702,7 +706,7 @@ spec:
|
||||||
# It can be deleted if this is a fresh installation, or if you have already
|
# It can be deleted if this is a fresh installation, or if you have already
|
||||||
# upgraded to use calico-ipam.
|
# upgraded to use calico-ipam.
|
||||||
- name: upgrade-ipam
|
- name: upgrade-ipam
|
||||||
image: calico/cni:v3.10.2
|
image: calico/cni:v3.12.0
|
||||||
command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
|
command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
|
||||||
env:
|
env:
|
||||||
- name: KUBERNETES_NODE_NAME
|
- name: KUBERNETES_NODE_NAME
|
||||||
|
@ -719,10 +723,12 @@ spec:
|
||||||
name: host-local-net-dir
|
name: host-local-net-dir
|
||||||
- mountPath: /host/opt/cni/bin
|
- mountPath: /host/opt/cni/bin
|
||||||
name: cni-bin-dir
|
name: cni-bin-dir
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
# This container installs the CNI binaries
|
# This container installs the CNI binaries
|
||||||
# and CNI network config file on each node.
|
# and CNI network config file on each node.
|
||||||
- name: install-cni
|
- name: install-cni
|
||||||
image: calico/cni:v3.10.2
|
image: calico/cni:v3.12.0
|
||||||
command: ["/install-cni.sh"]
|
command: ["/install-cni.sh"]
|
||||||
env:
|
env:
|
||||||
# Name of the CNI config file to create.
|
# Name of the CNI config file to create.
|
||||||
|
@ -753,19 +759,23 @@ spec:
|
||||||
name: cni-bin-dir
|
name: cni-bin-dir
|
||||||
- mountPath: /host/etc/cni/net.d
|
- mountPath: /host/etc/cni/net.d
|
||||||
name: cni-net-dir
|
name: cni-net-dir
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
# Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
|
# Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
|
||||||
# to communicate with Felix over the Policy Sync API.
|
# to communicate with Felix over the Policy Sync API.
|
||||||
- name: flexvol-driver
|
- name: flexvol-driver
|
||||||
image: calico/pod2daemon-flexvol:v3.10.2
|
image: calico/pod2daemon-flexvol:v3.12.0
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: flexvol-driver-host
|
- name: flexvol-driver-host
|
||||||
mountPath: /host/driver
|
mountPath: /host/driver
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
containers:
|
containers:
|
||||||
# Runs calico-node container on each Kubernetes node. This
|
# Runs calico-node container on each Kubernetes node. This
|
||||||
# container programs network policy and routes on each
|
# container programs network policy and routes on each
|
||||||
# host.
|
# host.
|
||||||
- name: calico-node
|
- name: calico-node
|
||||||
image: calico/node:v3.10.2
|
image: calico/node:v3.12.0
|
||||||
env:
|
env:
|
||||||
# Use Kubernetes API as the backing datastore.
|
# Use Kubernetes API as the backing datastore.
|
||||||
- name: DATASTORE_TYPE
|
- name: DATASTORE_TYPE
|
||||||
|
@ -831,7 +841,7 @@ spec:
|
||||||
# kops additions
|
# kops additions
|
||||||
# Set Felix iptables binary variant, Legacy or NFT
|
# Set Felix iptables binary variant, Legacy or NFT
|
||||||
- name: FELIX_IPTABLESBACKEND
|
- name: FELIX_IPTABLESBACKEND
|
||||||
value: "{{- or .Networking.Calico.IptablesBackend "Legacy" }}"
|
value: "{{- or .Networking.Calico.IptablesBackend "Auto" }}"
|
||||||
# Set to enable the experimental Prometheus metrics server
|
# Set to enable the experimental Prometheus metrics server
|
||||||
- name: FELIX_PROMETHEUSMETRICSENABLED
|
- name: FELIX_PROMETHEUSMETRICSENABLED
|
||||||
value: "{{- or .Networking.Calico.PrometheusMetricsEnabled "false" }}"
|
value: "{{- or .Networking.Calico.PrometheusMetricsEnabled "false" }}"
|
||||||
|
@ -959,7 +969,7 @@ spec:
|
||||||
scheduler.alpha.kubernetes.io/critical-pod: ''
|
scheduler.alpha.kubernetes.io/critical-pod: ''
|
||||||
spec:
|
spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
beta.kubernetes.io/os: linux
|
kubernetes.io/os: linux
|
||||||
tolerations:
|
tolerations:
|
||||||
# Mark the pod as a critical add-on for rescheduling.
|
# Mark the pod as a critical add-on for rescheduling.
|
||||||
- key: CriticalAddonsOnly
|
- key: CriticalAddonsOnly
|
||||||
|
@ -970,7 +980,7 @@ spec:
|
||||||
priorityClassName: system-cluster-critical
|
priorityClassName: system-cluster-critical
|
||||||
containers:
|
containers:
|
||||||
- name: calico-kube-controllers
|
- name: calico-kube-controllers
|
||||||
image: calico/kube-controllers:v3.10.2
|
image: calico/kube-controllers:v3.12.0
|
||||||
env:
|
env:
|
||||||
# Choose which controllers to run.
|
# Choose which controllers to run.
|
||||||
- name: ENABLED_CONTROLLERS
|
- name: ENABLED_CONTROLLERS
|
||||||
|
|
|
@ -683,7 +683,7 @@ func (b *BootstrapChannelBuilder) buildAddons() *channelsapi.Addons {
|
||||||
"k8s-1.7": "2.6.12-kops.1",
|
"k8s-1.7": "2.6.12-kops.1",
|
||||||
"k8s-1.7-v3": "3.8.0-kops.2",
|
"k8s-1.7-v3": "3.8.0-kops.2",
|
||||||
"k8s-1.12": "3.9.3-kops.2",
|
"k8s-1.12": "3.9.3-kops.2",
|
||||||
"k8s-1.16": "3.10.2-kops.1",
|
"k8s-1.16": "3.12.0-kops.1",
|
||||||
}
|
}
|
||||||
|
|
||||||
{
|
{
|
||||||
|
@ -750,7 +750,7 @@ func (b *BootstrapChannelBuilder) buildAddons() *channelsapi.Addons {
|
||||||
versions := map[string]string{
|
versions := map[string]string{
|
||||||
"k8s-1.9": "3.2.3-kops.1",
|
"k8s-1.9": "3.2.3-kops.1",
|
||||||
"k8s-1.12": "3.7.4-kops.1",
|
"k8s-1.12": "3.7.4-kops.1",
|
||||||
"k8s-1.15": "3.10.2-kops.1",
|
"k8s-1.15": "3.12.0-kops.1",
|
||||||
}
|
}
|
||||||
{
|
{
|
||||||
id := "k8s-1.9"
|
id := "k8s-1.9"
|
||||||
|
|
Loading…
Reference in New Issue