Commit Graph

28 Commits

Author SHA1 Message Date
Jesse Haka 33e2de60e5 do not create egress rules when using vipacl octavia 2020-10-16 14:11:22 +03:00
Ole Markus With 5cb63fb788 Fail if we find multiple sgs with same name 2020-08-26 13:41:15 +02:00
Ole Markus With 14a6f92f53 Delete SG rules that kops don't explicitly add to managed SGs 2020-08-26 11:09:22 +02:00
Peter Rifel 4d9f0128a3
Upgrade to klog2
This splits up the kubernetes 1.19 PR to make it easier to keep up to date until we get it sorted out.
2020-08-16 20:56:48 -05:00
Ole Markus With 84d2dcb624 Use SG to SG rule for cni tcp/udp rules 2020-08-07 09:39:44 +02:00
Ole Markus With c5ddd3885c Add support for cilium on openstack 2020-08-07 09:39:44 +02:00
Ole Markus With 4a16223361 Create master API security group unconditionally
Needed somewhere anyway. Failing to create this one errors with missing task
2020-07-12 21:08:13 +02:00
Ole Markus With 991549a5f4 Remove support for Romana 2020-06-03 08:23:53 +02:00
Jesse Haka d694a6f66d add support for AllowedCIDRs 2020-03-17 17:33:11 +02:00
Jesse Haka b77a58a896 add protocol4 as allowed to master 2019-10-28 11:57:51 +02:00
Jesse Haka a09a920e92 fix firewalls for openstack 2019-10-27 21:58:40 +02:00
Justin SB b6862103bb
Change default port for memberlist from 3997
We had a port collision on 3997; change the default memberlist ports
to avoid the collision (we haven't shipped a release with this in it).

Also create a go file so that we can use constants to keep track of
our port numbers, rather than magic values.
2019-10-14 07:26:27 -04:00
chentanjun 3d1966df84 fix-up some spelling mistakes in /pkg 2019-09-26 10:15:44 +08:00
Michael Wagner 8e156c7eb1 chore(openstack): also propagate additional sgs to ports 2019-09-24 13:39:29 +02:00
Kubernetes Prow Robot 3b9821d5c5
Merge pull request #7474 from nebril/cilium-standalone
Change Cilium templates to standalone version
2019-09-18 14:01:00 -07:00
Maciej Kwiek 74e10dadec Change Cilium templates to standalone version
This commit doesn't include any Cilium configuration, just takes the
quick install yaml from
https://github.com/cilium/cilium/blob/v1.6.0/install/kubernetes/quick-install.yaml

Signed-off-by: Maciej Kwiek <maciej@isovalent.com>
2019-09-12 17:23:50 +02:00
Jesse Haka 6278fec373 fix kubelet sg rules 2019-09-12 18:05:03 +03:00
Jesse Haka 9f2f3ccf25 clean security groups 2019-09-12 18:05:03 +03:00
mikesplain 9e55b8230a Update copyright notices
Also cleans some white spaces
2019-09-09 14:47:51 -04:00
Jesse Haka 74bf559afa open ports for etcd-manager 2019-08-13 16:48:59 +03:00
Jesse Haka 53834635ad add node-exporter to allowed ports 2019-05-13 13:13:28 +03:00
Justin SB 3e33ac7682
Change code from glog to klog
We don't call klog.InitFlags yet, because that will cause a flag
redefinition error until we get everyone to stop using glog.  That
will happen when we update to k8s 1.13.
2019-05-06 12:54:51 -04:00
Kashif Saadat 4b40a24695 Canal manifest updates for k8s v1.12+ 2019-04-24 17:37:28 +01:00
Sergiu Marsavela (smarsave) ac0b62680f Omit protocols in Openstack CNI Rules 2019-03-13 18:28:15 +01:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) ec8091294a Removing unnecessary 443 ingress on nodes 2019-02-26 08:33:23 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) f8a5abac56 Removing Egress rules as they are defaulted. Adding workaround for octavia 2019-02-25 09:45:31 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) 648328d520 Openstack Security Group Update 2019-02-22 14:43:58 -07:00
Derek Lemon -T (delemon - AEROTEK INC at Cisco) fb0939af9b Openstack Model, tasks, and cloud ops refactor 2019-01-15 14:16:08 -07:00