Commit Graph

106 Commits

Author SHA1 Message Date
Marcos Soutullo Rodriguez 9d6479fbba
Mount the whole /etc/ssl/certs directory for k8s-ec2-srcdst (#10169)
* Fix: Mount the whole `/etc/ssl/certs` directory for k8s-ec2-srcdst deployment.

Signed-off-by: Marcos Soutullo Rodriguez <marcos.soutullo@vodafone.com>

* Fix: Retrospective change to mount all CA certificates in <k8s-1.16

* Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-11-04 22:12:53 -08:00
John Gardiner Myers 2ac17bee69 Remove code for no-longer-supported k8s releases 2020-10-29 16:45:53 -07:00
Ciprian Hacman 3c07c72c70 Update Calico to v3.16.4 2020-10-27 07:36:39 +02:00
Ciprian Hacman 7b9a073da9 Add option for Calico to cleanup kube-proxy rules when running in eBPF mode 2020-10-27 07:35:08 +02:00
Ciprian Hacman 2fe6ee4b37 Use optional ConfigMap to configure k8s API endpoint for Calico 2020-10-27 07:35:07 +02:00
Ciprian Hacman a04cea6371 Add eBPF dataplane support for Calico CNI 2020-10-19 20:04:27 +03:00
AkiraFukushima 7ad4815fc9 Enable wireguard in calico-node if it is enabled 2020-10-11 15:53:11 +09:00
Ciprian Hacman d125e1a026 Update Calico to v3.16.3 2020-10-10 04:05:19 +03:00
monicagangwar a63ccd5163 [calico] awsSrcDstCheck to disable src/dest checks in AWS
* replacing k8s-ec2-srcdst with calico's config awsSrcDstCheck and
  flag FELIX_AWSSRCDSTCHECK
* documentation and iam changes for calico awsSrcDstCheck
2020-10-08 17:17:23 +05:30
Adam Smith 2fb1a4ecd2 Support ChainInsertMode config option for Calico Networking 2020-09-16 10:38:45 +01:00
Ciprian Hacman 0357d33ff6 Update Calico to v3.16.1 2020-09-09 06:37:27 +03:00
Ciprian Hacman 7a24b829aa Use calico/cni with fix for node name issue 2020-09-02 18:44:20 +03:00
Ciprian Hacman 1006f9082d Update Calico to v3.16.0 for k8s 1.16+ 2020-09-02 05:48:49 +03:00
ozdanborne 6ae4337249 remove nodeAffinity from typha 2020-08-27 12:59:08 -04:00
Ciprian Hacman eb218cdc1a Update Calico to v3.15.2 for k8s 1.16+ 2020-08-26 10:01:22 +03:00
Ciprian Hacman 89b6d8f20a Update Calico to v3.15.1 for k8s 1.16+ 2020-07-31 15:54:53 +03:00
Steven E. Harris 9a5e54699f Calico: upgrade "k8s-ec2-srcdst" to version v0.3.0
Upgrading the "k8s-ec2-srcdst" controller to this latest version
allows it to work correctly with the objects containing the new
"metadata.managedFields" field introduced in Kubernetes version
1.18.0.

The previous container image versions used a version of the
"client-go" library that was too old to consume these fields
correctly, causing the controller to fail repeatedly when trying to
read Node objects retrieved from the Kubernetes API server.
2020-07-29 09:30:16 -04:00
Ciprian Hacman 3336d7b309 Prefer nodes with "master" role for Calico Typha pods 2020-07-22 11:28:01 +03:00
Ciprian Hacman 4ca7385081 Update Calico to v3.15.0 for k8s 1.16+ 2020-06-30 09:04:51 +03:00
Ciprian Hacman b1ee578e5c Update Calico and Canal for CVE-2020-13597 2020-06-04 11:40:34 +03:00
Matt Long c00464f11d Update crds, apis, models. Add limited field validation 2020-05-27 15:24:01 +02:00
Matt Long 574442dd7b Enable configuration of the calico IP_AUTODETECTION_METHOD 2020-05-25 13:08:37 +02:00
mosheshitrit 9fffc5f8e0 Make CPU Requests for Calico configurable instead of hard-coded
Update bindata.go

Apply suggestions from code review

Applying suggested changes.

Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>

Applying changes after running `make gofmt`

Applying changes after running `make crds`

Apply suggestions from code review

Applying suggested changes.

Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>

Applying changes after running `make gofmt`

Fixing broken things

Typo fixes

Apply suggestions from code review

Co-Authored-By: Ciprian Hacman <ciprianhacman@gmail.com>

Apply suggested changes and run necessary `make` steps
2020-04-26 12:44:14 -04:00
Ciprian Hacman 006c2f9025 Update Calico liveness probe for k8s 1.12-1.15 2020-04-23 10:52:50 +03:00
Ciprian Hacman 916f3014b7 Update Calico and Canal to v3.13.3 for k8s 1.16+ 2020-04-23 10:52:50 +03:00
Rodrigo Menezes cfeefed17f fix misspelling 2020-04-07 10:41:55 -04:00
Ciprian Hacman 49dfafc606 Remove critical-pod annotation 2020-04-07 11:38:33 +03:00
Ciprian Hacman 5ee9ba2ee6 Update Calico and Canal to v3.13.2 2020-04-07 10:50:54 +03:00
Ciprian Hacman f218f0bd7a Update Calico and Canal to v3.12.0 2020-02-27 04:03:42 +02:00
John Gardiner Myers 6b1a131528 Remove addons only applicable to unsupported versions of Kubernetes 2020-01-11 21:23:58 -08:00
Ciprian Hacman a806f10b4e Make Calico-Typha and Canal templates easier to compare to each other 2019-12-13 21:46:17 +02:00
Ciprian Hacman f6193e0c41 Fix indent of metadata.name field for felixconfigurations.crd.projectcalico.org 2019-12-13 21:46:17 +02:00
Ciprian Hacman 346d0ba9bc Make templates easier to compare with official manifests 2019-12-13 21:46:17 +02:00
Ciprian Hacman 3b25c0c66a Add Calico v3.10.2 2019-12-13 21:46:11 +02:00
Ciprian Hacman dd69274cf2 Set FELIX_IPTABLESBACKEND for Calico and Canal 2019-12-10 13:45:33 +02:00
Ciprian Hacman f21df7cd6f Fix mounting Calico "flexvol-driver-host" in CoreOS 2019-12-08 16:43:29 +02:00
Zac Blazic 3c7564cbab Prefer Always as a value for CALICO_IPV4POOL_IPIP
Because the accepted values have changed since v3.0:
https://docs.projectcalico.org/v3.0/reference/node/configuration#environment-variables
2019-11-08 17:30:52 +02:00
Zac Blazic 0abb03135c Prefer CrossSubnet as a value for CALICO_IPV4POOL_IPIP
Because the accepted values have changed since v3.0:
https://docs.projectcalico.org/v3.0/reference/node/configuration#environment-variables
2019-11-08 17:14:57 +02:00
mikesplain 2ee0a5de91
Add back calico metrics options: 2019-11-05 14:50:59 -05:00
mikesplain 7a980efd7e
Add calico 3.9.1 2019-09-27 12:59:09 -04:00
Justin SB 70dd5c3f22
Calico: upgrade pod2daemon (only)
We want to pick up https://github.com/projectcalico/pod2daemon/pull/28 , to address https://github.com/kubernetes/kops/issues/7592 .

This is not ideal, but looking at the commit changes the only
potentially problematic change in the diff is
https://github.com/projectcalico/pod2daemon/pull/21 , which seems like
it shouldn't cause ay skew issues.
2019-09-27 00:14:26 -04:00
Justin SB ba76db7f41
Limit calico cpu request to 100m
Per docs/development/instancesizes.md we don't have much cpu on a 1
core machine.  Note that this is only requests, not limits, so calico
can still burst.

At least related to issue #7592
2019-09-26 22:57:42 -04:00
mikesplain b76d9b1773 Fix some missed values 2019-09-09 10:00:50 -04:00
GuyTempleton 948373a4ae Update calico and update manifest 2019-09-09 10:00:50 -04:00
GuyTempleton d0f8dc5760 Add ability to configure number of Typha Replicas
Adds the ability to configure the number of Typha replicas when using Calico CNI in 1.12+
to limit the impact of Calico on the APIServer and increase the scalability of the cluster.

Also adds the ability to configure Typha's Prometheus config.

Add Passing TyphaReplicas Validation Test
2019-09-09 10:00:50 -04:00
Pedro H. Spagiari cfb9f8a5ad fix(addons/networking.projectcalico.org) calico kube-controllers is needed in CRD mode 2019-09-04 10:37:09 -03:00
Kubernetes Prow Robot 41781ae059
Merge pull request #7480 from zetaab/feature/mtuopenstack
Configure calico MTU
2019-09-02 09:51:42 -07:00
Jesse Haka 381557c912 make mtu configurable 2019-08-29 20:25:00 +03:00
Jesse Haka a6f0d6fe90 configure mtu for openstack 2019-08-29 20:25:00 +03:00
Jesse Haka 72f444b93d use ipip mode 2019-08-29 20:23:36 +03:00