Jesse Haka
33e2de60e5
do not create egress rules when using vipacl octavia
2020-10-16 14:11:22 +03:00
Ole Markus With
5cb63fb788
Fail if we find multiple sgs with same name
2020-08-26 13:41:15 +02:00
Ole Markus With
14a6f92f53
Delete SG rules that kops don't explicitly add to managed SGs
2020-08-26 11:09:22 +02:00
Peter Rifel
4d9f0128a3
Upgrade to klog2
...
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
Ole Markus With
84d2dcb624
Use SG to SG rule for cni tcp/udp rules
2020-08-07 09:39:44 +02:00
Ole Markus With
c5ddd3885c
Add support for cilium on openstack
2020-08-07 09:39:44 +02:00
Ole Markus With
4a16223361
Create master API security group unconditionally
...
Needed somewhere anyway. Failing to create this one errors with missing task
2020-07-12 21:08:13 +02:00
Ole Markus With
991549a5f4
Remove support for Romana
2020-06-03 08:23:53 +02:00
Jesse Haka
d694a6f66d
add support for AllowedCIDRs
2020-03-17 17:33:11 +02:00
Jesse Haka
b77a58a896
add protocol4 as allowed to master
2019-10-28 11:57:51 +02:00
Jesse Haka
a09a920e92
fix firewalls for openstack
2019-10-27 21:58:40 +02:00
Justin SB
b6862103bb
Change default port for memberlist from 3997
...
We had a port collision on 3997; change the default memberlist ports
to avoid the collision (we haven't shipped a release with this in it).
Also create a go file so that we can use constants to keep track of
our port numbers, rather than magic values.
2019-10-14 07:26:27 -04:00
chentanjun
3d1966df84
fix-up some spelling mistakes in /pkg
2019-09-26 10:15:44 +08:00
Michael Wagner
8e156c7eb1
chore(openstack): also propagate additional sgs to ports
2019-09-24 13:39:29 +02:00
Kubernetes Prow Robot
3b9821d5c5
Merge pull request #7474 from nebril/cilium-standalone
...
Change Cilium templates to standalone version
2019-09-18 14:01:00 -07:00
Maciej Kwiek
74e10dadec
Change Cilium templates to standalone version
...
This commit doesn't include any Cilium configuration, just takes the
quick install yaml from
https://github.com/cilium/cilium/blob/v1.6.0/install/kubernetes/quick-install.yaml
Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
2019-09-12 17:23:50 +02:00
Jesse Haka
6278fec373
fix kubelet sg rules
2019-09-12 18:05:03 +03:00
Jesse Haka
9f2f3ccf25
clean security groups
2019-09-12 18:05:03 +03:00
mikesplain
9e55b8230a
Update copyright notices
...
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Jesse Haka
74bf559afa
open ports for etcd-manager
2019-08-13 16:48:59 +03:00
Jesse Haka
53834635ad
add node-exporter to allowed ports
2019-05-13 13:13:28 +03:00
Justin SB
3e33ac7682
Change code from glog to klog
...
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog. That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Kashif Saadat
4b40a24695
Canal manifest updates for k8s v1.12+
2019-04-24 17:37:28 +01:00
Sergiu Marsavela (smarsave)
ac0b62680f
Omit protocols in Openstack CNI Rules
2019-03-13 18:28:15 +01:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco)
ec8091294a
Removing unnecessary 443 ingress on nodes
2019-02-26 08:33:23 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco)
f8a5abac56
Removing Egress rules as they are defaulted. Adding workaround for octavia
2019-02-25 09:45:31 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco)
648328d520
Openstack Security Group Update
2019-02-22 14:43:58 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco)
fb0939af9b
Openstack Model, tasks, and cloud ops refactor
2019-01-15 14:16:08 -07:00