Marcos Soutullo Rodriguez
9d6479fbba
Mount the whole /etc/ssl/certs directory for k8s-ec2-srcdst ( #10169 )
...
* Fix: Mount the whole `/etc/ssl/certs` directory for k8s-ec2-srcdst deployment.
Signed-off-by: Marcos Soutullo Rodriguez <marcos.soutullo@vodafone.com>
* Fix: Retrospective change to mount all CA certificates in <k8s-1.16
* Apply suggestions from code review
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-11-04 22:12:53 -08:00
John Gardiner Myers
2ac17bee69
Remove code for no-longer-supported k8s releases
2020-10-29 16:45:53 -07:00
Ciprian Hacman
3c07c72c70
Update Calico to v3.16.4
2020-10-27 07:36:39 +02:00
Ciprian Hacman
7b9a073da9
Add option for Calico to cleanup kube-proxy rules when running in eBPF mode
2020-10-27 07:35:08 +02:00
Ciprian Hacman
2fe6ee4b37
Use optional ConfigMap to configure k8s API endpoint for Calico
2020-10-27 07:35:07 +02:00
Ciprian Hacman
a04cea6371
Add eBPF dataplane support for Calico CNI
2020-10-19 20:04:27 +03:00
AkiraFukushima
7ad4815fc9
Enable wireguard in calico-node if it is enabled
2020-10-11 15:53:11 +09:00
Ciprian Hacman
d125e1a026
Update Calico to v3.16.3
2020-10-10 04:05:19 +03:00
monicagangwar
a63ccd5163
[calico] awsSrcDstCheck to disable src/dest checks in AWS
...
* replacing k8s-ec2-srcdst with calico's config awsSrcDstCheck and
flag FELIX_AWSSRCDSTCHECK
* documentation and iam changes for calico awsSrcDstCheck
2020-10-08 17:17:23 +05:30
Adam Smith
2fb1a4ecd2
Support ChainInsertMode config option for Calico Networking
2020-09-16 10:38:45 +01:00
Ciprian Hacman
0357d33ff6
Update Calico to v3.16.1
2020-09-09 06:37:27 +03:00
Ciprian Hacman
7a24b829aa
Use calico/cni with fix for node name issue
2020-09-02 18:44:20 +03:00
Ciprian Hacman
1006f9082d
Update Calico to v3.16.0 for k8s 1.16+
2020-09-02 05:48:49 +03:00
ozdanborne
6ae4337249
remove nodeAffinity from typha
2020-08-27 12:59:08 -04:00
Ciprian Hacman
eb218cdc1a
Update Calico to v3.15.2 for k8s 1.16+
2020-08-26 10:01:22 +03:00
Ciprian Hacman
89b6d8f20a
Update Calico to v3.15.1 for k8s 1.16+
2020-07-31 15:54:53 +03:00
Steven E. Harris
9a5e54699f
Calico: upgrade "k8s-ec2-srcdst" to version v0.3.0
...
Upgrading the "k8s-ec2-srcdst" controller to this latest version
allows it to work correctly with the objects containing the new
"metadata.managedFields" field introduced in Kubernetes version
1.18.0.
The previous container image versions used a version of the
"client-go" library that was too old to consume these fields
correctly, causing the controller to fail repeatedly when trying to
read Node objects retrieved from the Kubernetes API server.
2020-07-29 09:30:16 -04:00
Ciprian Hacman
3336d7b309
Prefer nodes with "master" role for Calico Typha pods
2020-07-22 11:28:01 +03:00
Ciprian Hacman
4ca7385081
Update Calico to v3.15.0 for k8s 1.16+
2020-06-30 09:04:51 +03:00
Ciprian Hacman
b1ee578e5c
Update Calico and Canal for CVE-2020-13597
2020-06-04 11:40:34 +03:00
Matt Long
c00464f11d
Update crds, apis, models. Add limited field validation
2020-05-27 15:24:01 +02:00
Matt Long
574442dd7b
Enable configuration of the calico IP_AUTODETECTION_METHOD
2020-05-25 13:08:37 +02:00
mosheshitrit
9fffc5f8e0
Make CPU Requests for Calico configurable instead of hard-coded
...
Update bindata.go
Apply suggestions from code review
Applying suggested changes.
Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>
Applying changes after running `make gofmt`
Applying changes after running `make crds`
Apply suggestions from code review
Applying suggested changes.
Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>
Applying changes after running `make gofmt`
Fixing broken things
Typo fixes
Apply suggestions from code review
Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>
Apply suggested changes and run necessary `make` steps
2020-04-26 12:44:14 -04:00
Ciprian Hacman
006c2f9025
Update Calico liveness probe for k8s 1.12-1.15
2020-04-23 10:52:50 +03:00
Ciprian Hacman
916f3014b7
Update Calico and Canal to v3.13.3 for k8s 1.16+
2020-04-23 10:52:50 +03:00
Rodrigo Menezes
cfeefed17f
fix misspelling
2020-04-07 10:41:55 -04:00
Ciprian Hacman
49dfafc606
Remove critical-pod annotation
2020-04-07 11:38:33 +03:00
Ciprian Hacman
5ee9ba2ee6
Update Calico and Canal to v3.13.2
2020-04-07 10:50:54 +03:00
Ciprian Hacman
f218f0bd7a
Update Calico and Canal to v3.12.0
2020-02-27 04:03:42 +02:00
John Gardiner Myers
6b1a131528
Remove addons only applicable to unsupported versions of Kubernetes
2020-01-11 21:23:58 -08:00
Ciprian Hacman
a806f10b4e
Make Calico-Typha and Canal templates easier to compare to each other
2019-12-13 21:46:17 +02:00
Ciprian Hacman
f6193e0c41
Fix indent of metadata.name field for felixconfigurations.crd.projectcalico.org
2019-12-13 21:46:17 +02:00
Ciprian Hacman
346d0ba9bc
Make templates easier to compare with official manifests
2019-12-13 21:46:17 +02:00
Ciprian Hacman
3b25c0c66a
Add Calico v3.10.2
2019-12-13 21:46:11 +02:00
Ciprian Hacman
dd69274cf2
Set FELIX_IPTABLESBACKEND for Calico and Canal
2019-12-10 13:45:33 +02:00
Ciprian Hacman
f21df7cd6f
Fix mounting Calico "flexvol-driver-host" in CoreOS
2019-12-08 16:43:29 +02:00
Zac Blazic
3c7564cbab
Prefer Always as a value for CALICO_IPV4POOL_IPIP
...
Because the accepted values have changed since v3.0:
https://docs.projectcalico.org/v3.0/reference/node/configuration#environment-variables
2019-11-08 17:30:52 +02:00
Zac Blazic
0abb03135c
Prefer CrossSubnet as a value for CALICO_IPV4POOL_IPIP
...
Because the accepted values have changed since v3.0:
https://docs.projectcalico.org/v3.0/reference/node/configuration#environment-variables
2019-11-08 17:14:57 +02:00
mikesplain
2ee0a5de91
Add back calico metrics options:
2019-11-05 14:50:59 -05:00
mikesplain
7a980efd7e
Add calico 3.9.1
2019-09-27 12:59:09 -04:00
Justin SB
70dd5c3f22
Calico: upgrade pod2daemon (only)
...
We want to pick up https://github.com/projectcalico/pod2daemon/pull/28 , to address https://github.com/kubernetes/kops/issues/7592 .
This is not ideal, but looking at the commit changes the only
potentially problematic change in the diff is
https://github.com/projectcalico/pod2daemon/pull/21 , which seems like
it shouldn't cause ay skew issues.
2019-09-27 00:14:26 -04:00
Justin SB
ba76db7f41
Limit calico cpu request to 100m
...
Per docs/development/instancesizes.md we don't have much cpu on a 1
core machine. Note that this is only requests, not limits, so calico
can still burst.
At least related to issue #7592
2019-09-26 22:57:42 -04:00
mikesplain
b76d9b1773
Fix some missed values
2019-09-09 10:00:50 -04:00
GuyTempleton
948373a4ae
Update calico and update manifest
2019-09-09 10:00:50 -04:00
GuyTempleton
d0f8dc5760
Add ability to configure number of Typha Replicas
...
Adds the ability to configure the number of Typha replicas when using Calico CNI in 1.12+
to limit the impact of Calico on the APIServer and increase the scalability of the cluster.
Also adds the ability to configure Typha's Prometheus config.
Add Passing TyphaReplicas Validation Test
2019-09-09 10:00:50 -04:00
Pedro H. Spagiari
cfb9f8a5ad
fix(addons/networking.projectcalico.org) calico kube-controllers is needed in CRD mode
2019-09-04 10:37:09 -03:00
Kubernetes Prow Robot
41781ae059
Merge pull request #7480 from zetaab/feature/mtuopenstack
...
Configure calico MTU
2019-09-02 09:51:42 -07:00
Jesse Haka
381557c912
make mtu configurable
2019-08-29 20:25:00 +03:00
Jesse Haka
a6f0d6fe90
configure mtu for openstack
2019-08-29 20:25:00 +03:00
Jesse Haka
72f444b93d
use ipip mode
2019-08-29 20:23:36 +03:00