Commit Graph

170 Commits

Author SHA1 Message Date
Ciprian Hacman f2d9193e90 Update Calico to v3.27.0 2023-12-27 11:08:13 +02:00
Ciprian Hacman 1cb21aeebe Update Calico to v3.26.4 2023-11-17 04:30:40 +02:00
Ciprian Hacman dd0c9bc617 Update Calico to v3.25.2 2023-09-06 06:27:21 +03:00
John Gardiner Myers b3908e592c Remove support for Kubernetes 1.23 2023-09-03 16:22:18 -07:00
Jesse Haka de9c5fbf2e update calico and canal to 3.25.1 2023-05-24 08:48:19 +03:00
John Gardiner Myers 005ec38972 Remove code for no-longer-supported k8s 1.21 2022-12-24 21:44:50 -08:00
John Gardiner Myers 7f502be319 Calico: Don't try to upgrade IPAM in IPv6 clusters 2022-12-11 20:53:51 -08:00
John Gardiner Myers 0ce9877eb4 Revert copy of "Calico: Work around host port/conntrack problem" 2022-11-28 07:31:32 -08:00
John Gardiner Myers 5d1c3a8361 Revert "Calico: Work around host port/conntrack problem"
This reverts commit 9105368a41.
2022-11-27 15:19:14 -08:00
John Gardiner Myers 0424c474a3 Don't disable AWS src/dst checks in Calico IPv6 2022-11-25 20:57:48 -08:00
John Gardiner Myers 8473e8b2e7 Stop making MasterInternalName configurable 2022-11-16 22:06:02 -08:00
Ciprian Hacman e2be2a5e52 Update Calico to v3.23.5 for k8s 1.22+ 2022-11-15 05:25:35 +02:00
Ciprian Hacman 9d47c8d2e4 Update Calico to v3.24.5 for k8s 1.25+ 2022-11-15 05:21:05 +02:00
Ciprian Hacman 29cd8be78f Update Calico to v3.24.3 for k8s 1.25+ 2022-10-28 07:39:30 +03:00
Ciprian Hacman 48ebb20d83 Update Calico to v3.23.4 for k8s 1.22+ 2022-10-28 07:30:19 +03:00
Ciprian Hacman f9acd69eb4 Update Calico to v3.21.6 for k8s 1.16+ 2022-10-28 07:30:06 +03:00
Ciprian Hacman 6a5ba584c5 Update Calico to v3.24.1 2022-09-03 10:58:06 +03:00
Steven E. Harris 69f8191921
Calico: Work around host port/conntrack problem
In Calico's released versions, when using the eBPF data plane,
containers using host ports cannot respond to connection attempts
correctly. These container receive the packets from the client
forwarded after DNAT, but when they reply, there is no conntrack entry
for the would-be connection, so netfilter drops the reply packets,
preventing the connection from completing. The client never receives
the reply packets. The conntrack entry is missing because Calico
mistakenly attempts to optimize it away.

Work around the problem by disabling the Calico Felix program's
"BPFHostConntrackBypass" feature. This is a temporary measure until
the Calico maintainers can improve this feature to better handle host
port traffic, preserving these conntrack entries as intended.
2022-08-31 02:22:45 -04:00
Ciprian Hacman dc3ff3f3c7 Update Calico to v3.23.3 2022-07-20 09:58:33 +03:00
Ciprian Hacman 7fbe0454f2 Use Calico v3.23 for Kubernetes 1.22+ 2022-06-29 17:17:33 +03:00
Ciprian Hacman e1fb514510 Update Calico to v3.23.2 2022-06-29 07:55:37 +03:00
Jesse Haka 2b6770890a replace flexdriver with busybox 2022-06-16 16:32:02 +03:00
Ciprian Hacman 1c644ecebb Update Calico to v3.23.1 2022-05-23 18:46:56 +03:00
Ciprian Hacman 3dba71b92d Use Calico v3.21 with older versions of k8s 2022-05-14 10:17:17 +03:00
Ciprian Hacman 6435c3d69f Add missing pieces from Calico v3.23 manifests 2022-05-14 10:17:17 +03:00
Ciprian Hacman 0a3946c2e3 Update Calico to v3.23.0 2022-05-10 11:14:32 +03:00
Peter Rifel abc6378656
Update remaining addon manifests for control-plane node role label 2022-04-19 16:52:06 -05:00
Ciprian Hacman 84a494617d Update Calico to v3.21.5 2022-04-17 07:40:37 +03:00
John Gardiner Myers cac727c357 Make cloudProvider a struct in v1alpha3 API 2022-03-02 21:59:49 -08:00
Ciprian Hacman 26eccb0cbf Update Calico to v3.21.4
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-03 10:15:30 +02:00
Ciprian Hacman 86ca968dd0 Update Calico to v3.21.2 2021-12-13 08:09:19 +02:00
Ciprian Hacman 5cad1999fc Update Calico to v3.21.1 2021-11-24 07:44:23 +02:00
zhengtianbao 976e3c1f13 Add option to set allow_ip_forwarding for the calico network 2021-11-04 14:26:27 +08:00
Ciprian Hacman b6565d86a2 Apply suggestions from code review 2021-10-30 20:57:40 +03:00
Ciprian Hacman 76898881cb Use prefixes for IPv6 with Calico 2021-10-30 20:57:40 +03:00
Ciprian Hacman 036c450093 Update Calico to v3.20.2 2021-10-06 05:39:26 +03:00
Ciprian Hacman faa66c6597 Update Calico to v3.20.1 2021-09-19 09:31:39 +03:00
Ciprian Hacman 966d2d6308 Update Calico to v3.20.0 2021-08-02 08:51:37 +03:00
Ciprian Hacman a12b3145ee Enable cross-subnet mode with Calico by default 2021-06-25 07:13:20 +03:00
John Gardiner Myers 07ee0c2206 Simplify Calico IPv6 configuration 2021-06-14 08:06:10 -07:00
Dmytro Oboznyi feed3b26ae
Add proxy envs to calico to make possible usage of AWS source destination check
Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
2021-06-07 16:56:35 +03:00
Ciprian Hacman 70f77a34d1 Add options for configuring IPv4 and IPv6 support with Calico 2021-06-04 17:05:40 +03:00
Ciprian Hacman ca39686c29 Update Calico to v3.19.1 2021-05-25 07:34:50 +03:00
John Gardiner Myers d3469d6ec2 Remove code for no-longer-supported k8s versions 2021-05-07 23:40:03 -07:00
Ciprian Hacman 6ec8e7c224 Update Calico to v3.19.0 2021-05-03 10:22:51 +03:00
Ciprian Hacman dffb1ca5e0 Update Calico to v3.18.2 2021-04-28 05:50:06 +03:00
Ciprian Hacman 909f206484 Update Calico to v3.18.1 2021-03-12 05:47:55 +02:00
Ciprian Hacman b44065c692 Remove manually added labels from addons 2021-03-06 09:31:22 +02:00
Ciprian Hacman bfc32c9c1a Disable Calico Prometheus metrics by default 2021-03-05 08:42:20 +02:00
Ciprian Hacman aa7f866f26 Update Calico to v3.18.0 2021-02-23 06:22:40 +02:00