Commit Graph

27 Commits

Author SHA1 Message Date
Jan Safranek 0d03095fda Add SELinux support to containerd
Add cluster.Spec.Containerd.SELinuxEnabled field that enables SELinux in
containerd.

With SELinux enabled, all pods that use HostPath volumes must run with
SELinux label `spc_t`, otherwise SELinux denies the pods to touch the host
filesystem.
2023-06-19 15:20:08 +02:00
chenliu1993 d36b3e2de6
Update kube-router to v1.5.3
Signed-off-by: chenliu1993 <cl2037829916@gmail.com>
2023-03-26 08:46:06 +00:00
Peter Rifel 116b887466 Remove namespaces from cluster-scoped resources in CNI manifests 2022-07-29 08:35:43 +03:00
Ciprian Hacman 91d681622c Update kube-router to v1.2.3 2021-06-07 05:25:00 +03:00
Ciprian Hacman 7c2dc634ec Update kube-router to v1.1.1 2020-12-30 09:08:35 +02:00
John Gardiner Myers 2ac17bee69 Remove code for no-longer-supported k8s releases 2020-10-29 16:45:53 -07:00
Ciprian Hacman fd62ca9e42 Update kube-router to v1.0.1 2020-08-26 10:53:22 +03:00
Anders Ingemann 905fac677b
kube-router: Enable BGP graceful restart 2020-08-14 09:29:51 +02:00
Anders Ingemann 154d8220ba
Support for using hostPort when using kube-router 2020-08-11 10:52:07 +02:00
John Gardiner Myers 53e07476df Widen the tolerations of kuberouter 2020-07-09 22:25:59 -07:00
Ciprian Hacman 91074906cf Update kube-router to v1.0.0 2020-07-07 06:58:49 +03:00
Ciprian Hacman b3fbb494c6 Fix template for kube-router v0.4.0 2020-03-15 17:38:59 +02:00
Ciprian Hacman 163c11fc6c Fix template for kube-router v0.4.0 2020-03-14 17:23:12 +02:00
Ciprian Hacman 84648dce4a Update kube-router to v0.4.0 2020-03-13 17:54:32 +02:00
Matt Shipman 26fb6d030b fix kuberouter for k8s 1.16
Starting in k8s 1.16 the kublet requires that cniVersion is set in the cni config
2020-03-12 10:27:08 -07:00
John Gardiner Myers 38aafc7cdc Add missing priorityClassName for critical pods 2020-01-21 21:03:07 -08:00
Piotr Komborski d03d476e16
Update kube-router to 0.3.1 2019-07-24 16:44:13 +02:00
Jordan Liggitt 9a06ff550c Update 1.12 addons to use apps/v1 2019-02-20 09:21:22 -05:00
Jordan Liggitt 3cef342dbe Copy latest addons to 1.12 2019-02-20 09:20:01 -05:00
Zivago Lee f4002a2143 add wider tolerations to the kube-router daemonset 2018-07-26 00:35:39 -07:00
Ali Rizwan 100674e1bf Added metrics port and health check to kube-router 2018-07-10 16:20:19 +02:00
andrewsykim 42b72e475a fix version of kube-router at v0.1.0 2018-04-07 09:28:44 -04:00
Justin Santa Barbara 148a65e1ad Fix CNI CPU allocations
* Limit each CNI provider to 100m

* Remove CPU limits - they cause serious problems
(https://github.com/kubernetes/kubernetes/issues/51135), but this also
makes the CPU allocation less problematic.

* Bump versions and start introducing the `-kops.1` suffix preemptively.

* Upgrade flannel to 0.9.0 as it fixes a lot.
2017-11-13 01:28:40 -05:00
Murali Reddy 2c7d85f480 Remove beta annotation versions (deprectated in 1.8) of init containers and move init
container to spec section
2017-10-13 02:29:36 +05:30
Murali Reddy a43df55540 Certificate generated for kube-router has CN system:kube-router, so user
system:kube-router need to be given necessary RBAC permissions

Fixes #3463
2017-10-05 21:29:11 +05:30
Murali Reddy 9b8f74d569 remove --cluster-cidr from manifest.
Kube-router was using --cluster-cidr flag to get the subnet allocated
for pod CIDR's. But now kube-router has the ability internally to infer
the CIDR allocated for the pod's by getting the information from
kubernetes API server node spec's
2017-08-25 01:21:51 +05:30
Murali Reddy e872dbcb86 add support for kube-router as CNI networking provider
fixes #2606

Most part of the changes are similar to current supported CNI networking
provider. Kube-router also support IPVS bassed service proxy which can
be used as replacement for kube-proxy. So the manifest for kube-router
included with this patch enables kube-router to provide pod-to-pod
networking, IPVS based service proxy and ingress pod firewall.
2017-06-09 17:01:31 +05:30