Commit Graph

135 Commits

Author SHA1 Message Date
Ciprian Hacman 036c450093 Update Calico to v3.20.2 2021-10-06 05:39:26 +03:00
Ciprian Hacman faa66c6597 Update Calico to v3.20.1 2021-09-19 09:31:39 +03:00
Ciprian Hacman 966d2d6308 Update Calico to v3.20.0 2021-08-02 08:51:37 +03:00
Ciprian Hacman a12b3145ee Enable cross-subnet mode with Calico by default 2021-06-25 07:13:20 +03:00
John Gardiner Myers 07ee0c2206 Simplify Calico IPv6 configuration 2021-06-14 08:06:10 -07:00
Dmytro Oboznyi feed3b26ae
Add proxy envs to calico to make possible usage of AWS source destination check
Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
2021-06-07 16:56:35 +03:00
Ciprian Hacman 70f77a34d1 Add options for configuring IPv4 and IPv6 support with Calico 2021-06-04 17:05:40 +03:00
Ciprian Hacman ca39686c29 Update Calico to v3.19.1 2021-05-25 07:34:50 +03:00
John Gardiner Myers d3469d6ec2 Remove code for no-longer-supported k8s versions 2021-05-07 23:40:03 -07:00
Ciprian Hacman 6ec8e7c224 Update Calico to v3.19.0 2021-05-03 10:22:51 +03:00
Ciprian Hacman dffb1ca5e0 Update Calico to v3.18.2 2021-04-28 05:50:06 +03:00
Ciprian Hacman 909f206484 Update Calico to v3.18.1 2021-03-12 05:47:55 +02:00
Ciprian Hacman b44065c692 Remove manually added labels from addons 2021-03-06 09:31:22 +02:00
Ciprian Hacman bfc32c9c1a Disable Calico Prometheus metrics by default 2021-03-05 08:42:20 +02:00
Ciprian Hacman aa7f866f26 Update Calico to v3.18.0 2021-02-23 06:22:40 +02:00
Ciprian Hacman f42f913ee2 Add liveness probe for calico-kube-controllers 2021-02-17 08:48:55 +02:00
Ciprian Hacman fe55158624 Update Calico to v3.17.2 2021-02-11 13:03:14 +02:00
avdhoot 0717e4a50a Fix rendering issue created by #10414 2021-02-01 14:09:20 +05:30
Ciprian Hacman ebd0759033 Add startup probe for calico-kube-controllers 2021-01-22 09:44:53 +02:00
Kubernetes Prow Robot ef8c36999a
Merge pull request #10404 from seh/allow-use-of-calico-vxlan-backend
Calico: Allow operators to choose which encapsulation mode to use
2020-12-18 10:54:25 -08:00
Steven E. Harris f0f45b71fd Allow use of Calico's VXLAN networking backend
Introduce a new "encapsulationMode" field in Calico's portion of the
Cluster specification to allow switching between the the IP-in-IP and
VXLAN encapsulation protocols. For now, we accept the values "ipip"
and "vxlan," and forgo a possible "none" value that would disable
encapsulation altogether (at least for the default Calico IP pool).

Augment the default-populating procedure for Calico to take this field
into account when deciding both which networking backend to use and
whether to use IP-in-IP or VXLAN encapsulation for the default IP
pool. Note that these values supplied for the "CALICO_IPV4POOL_IPIP"
and "CALICO_IPV4POOL_VXLAN" environment variables in the "calico-node"
DaemonSet pod spec only matter for creating the "default" IPPool pool
object when no such objects already exist.

Generalize the documentation for the "crossSubnet" field to cover
environments more broad than just AWS, as Calico can employ this
selective encapsulation in any environment in which it can detect
boundaries between subnets.
2020-12-18 10:55:11 -05:00
Ciprian Hacman 25db4eb012 Allow Calico to run on systems with loose reverse path forwarding 2020-12-17 14:15:38 +02:00
Kubernetes Prow Robot ad208cc3be
Merge pull request #10414 from avdhoot/expose-metrics-Calico
Expose metrics port when PrometheusMetricsEnabled set to true in Calico
2020-12-14 21:31:48 -08:00
avdhoot 7e31c06f30 Correct default TyphaPrometheusMetricsPort 2020-12-12 08:53:30 +05:30
avdhoot f9d5ce04a6 This will expose metrics port when PrometheusMetricsEnabled set to true 2020-12-12 08:43:45 +05:30
Ciprian Hacman ab9d30a015 Order by name fields in CalicoNetworkingSpec 2020-12-11 18:23:49 +02:00
Ciprian Hacman c13d4a194c Update Calico to v3.17.1 2020-12-11 18:21:54 +02:00
Ciprian Hacman 372fde0949 Allow override of registry and tag for Calico images 2020-12-11 16:22:09 +02:00
Ciprian Hacman 8b9fb1ffe8 Update Calico to v3.17.0 2020-11-24 08:17:23 +02:00
Marcos Soutullo Rodriguez 9d6479fbba
Mount the whole /etc/ssl/certs directory for k8s-ec2-srcdst (#10169)
* Fix: Mount the whole `/etc/ssl/certs` directory for k8s-ec2-srcdst deployment.

Signed-off-by: Marcos Soutullo Rodriguez <marcos.soutullo@vodafone.com>

* Fix: Retrospective change to mount all CA certificates in <k8s-1.16

* Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-11-04 22:12:53 -08:00
John Gardiner Myers 2ac17bee69 Remove code for no-longer-supported k8s releases 2020-10-29 16:45:53 -07:00
Ciprian Hacman 3c07c72c70 Update Calico to v3.16.4 2020-10-27 07:36:39 +02:00
Ciprian Hacman 7b9a073da9 Add option for Calico to cleanup kube-proxy rules when running in eBPF mode 2020-10-27 07:35:08 +02:00
Ciprian Hacman 2fe6ee4b37 Use optional ConfigMap to configure k8s API endpoint for Calico 2020-10-27 07:35:07 +02:00
Ciprian Hacman a04cea6371 Add eBPF dataplane support for Calico CNI 2020-10-19 20:04:27 +03:00
AkiraFukushima 7ad4815fc9 Enable wireguard in calico-node if it is enabled 2020-10-11 15:53:11 +09:00
Ciprian Hacman d125e1a026 Update Calico to v3.16.3 2020-10-10 04:05:19 +03:00
monicagangwar a63ccd5163 [calico] awsSrcDstCheck to disable src/dest checks in AWS
* replacing k8s-ec2-srcdst with calico's config awsSrcDstCheck and
  flag FELIX_AWSSRCDSTCHECK
* documentation and iam changes for calico awsSrcDstCheck
2020-10-08 17:17:23 +05:30
Adam Smith 2fb1a4ecd2 Support ChainInsertMode config option for Calico Networking 2020-09-16 10:38:45 +01:00
Ciprian Hacman 0357d33ff6 Update Calico to v3.16.1 2020-09-09 06:37:27 +03:00
Ciprian Hacman 7a24b829aa Use calico/cni with fix for node name issue 2020-09-02 18:44:20 +03:00
Ciprian Hacman 1006f9082d Update Calico to v3.16.0 for k8s 1.16+ 2020-09-02 05:48:49 +03:00
ozdanborne 6ae4337249 remove nodeAffinity from typha 2020-08-27 12:59:08 -04:00
Ciprian Hacman eb218cdc1a Update Calico to v3.15.2 for k8s 1.16+ 2020-08-26 10:01:22 +03:00
Ciprian Hacman 89b6d8f20a Update Calico to v3.15.1 for k8s 1.16+ 2020-07-31 15:54:53 +03:00
Steven E. Harris 9a5e54699f Calico: upgrade "k8s-ec2-srcdst" to version v0.3.0
Upgrading the "k8s-ec2-srcdst" controller to this latest version
allows it to work correctly with the objects containing the new
"metadata.managedFields" field introduced in Kubernetes version
1.18.0.

The previous container image versions used a version of the
"client-go" library that was too old to consume these fields
correctly, causing the controller to fail repeatedly when trying to
read Node objects retrieved from the Kubernetes API server.
2020-07-29 09:30:16 -04:00
Ciprian Hacman 3336d7b309 Prefer nodes with "master" role for Calico Typha pods 2020-07-22 11:28:01 +03:00
Ciprian Hacman 4ca7385081 Update Calico to v3.15.0 for k8s 1.16+ 2020-06-30 09:04:51 +03:00
Ciprian Hacman b1ee578e5c Update Calico and Canal for CVE-2020-13597 2020-06-04 11:40:34 +03:00
Matt Long c00464f11d Update crds, apis, models. Add limited field validation 2020-05-27 15:24:01 +02:00