Murali Reddy
d3356513e3
use kube-router as kube-proxy replacement
...
Fixes #118
2017-08-11 15:36:46 +05:30
Murali Reddy
79a176ac10
Update kubeadm.md
2017-08-11 00:55:05 +05:30
Bryan Zubrod
c81bfbb616
Enable pod egress masquerading by default ( #111 )
...
* Enable pod egress masquerading by default
- Adds flag "--enable-pod-egress" (default: true)
- Removes previously created iptables rule if option is changed to false
* Use an ipset to match Pod egress traffic to be masqueraded
* Set --cluster-cidr as depreciated flag
If set to anything, normal dynamic Pod egress masquerading is turned on.
* Use Replace else Add logic for updating export policy
Fixes errors logged due to existing statement in poliy.
2017-08-10 11:50:06 -05:00
Murali Reddy
0a8b7e7fd3
Merge pull request #117 from cloudnativelabs/115-kubeadm-rbac
...
kubeadm RBAC fixes and cluster setup with kubeadm instructions
2017-08-10 18:17:50 +05:30
Murali Reddy
1786a5ea32
kubeadm RBAC fixes and cluster steup with kubeadm instructions
...
Fixes #115
2017-08-10 18:11:31 +05:30
bzub
e5f24c201d
vagrant: Fix invalid shell function call
2017-08-10 01:55:40 -05:00
Bryan Zubrod
f6b33a0370
Support updating kube-router in a local VM cluster ( #116 )
...
* gofmt
* docs: Remove manual AWS config reference. It's automatic now.
* Support updating kube-router in a running local VM cluster
- "make vagrant-image-update" target added
- Documentation added and small reorganization
2017-08-09 23:03:49 -05:00
Murali Reddy
d3f43fc8fa
Merge pull request #114 from cloudnativelabs/113-segment-voilation
...
segmentation violation when kube-router is not able to contact api server
2017-08-09 23:28:12 +05:30
Murali Reddy
801b0e940b
segmentation violation when kube-router is not able to contact api server
...
Fixes #113
2017-08-09 23:21:56 +05:30
Bryan Zubrod
1a71a12ec7
vagrant: Local cluster enhancements ( #110 )
...
* Ensure image from current build is used
* Fix vagrant destroy logic
2017-08-07 21:39:32 -05:00
Murali Reddy
cbfe8e3790
Merge pull request #109 from cloudnativelabs/ip-ip-tunnel-perf
...
reduce ipip tunnel MTU by 20 bytes to accommodate the tunnel overhead
2017-08-07 19:43:10 +05:30
Murali Reddy
898d78d688
reduce ipip tunnel MTU 20 to accommodate the tunnel overhead
...
Fixes #108
2017-08-07 19:35:36 +05:30
Murali Reddy
fcac507d61
Merge pull request #106 from cloudnativelabs/cross-subnet-connectiivty
...
Use IP-IP tunnelling for cross-subnet pod connectivity
v0.0.11
2017-08-06 13:56:02 +05:30
Murali Reddy
b8d3914242
Use IP-IP tunnelling for cross-subnet pod connectivity
...
- create a ipip tunnel interface from each node to nodes in the different subnet
- insert route to local routing table using tunnel device
Fixes #92
2017-08-06 13:05:14 +05:30
Bryan Zubrod
5a3abf9ec1
Add support for testing code changes in kubernetes ( #105 )
...
automated via Vagrant provisioned local VMs
fixes #105
2017-08-06 01:11:27 -05:00
Murali Reddy
fbdd9e9a6f
Merge pull request #100 from cloudnativelabs/99-randomize-service-endpoints
...
Randomize service endpoint addition when configuring destination on ipvs service
2017-08-05 04:01:24 +05:30
Murali Reddy
7934759ac2
Randomize service endpoint addition when configuring destination on ipvs service
...
Fixes #99
2017-08-05 03:38:36 +05:30
Bryan Zubrod
9e75203598
Use libnetwork/ipvs instead of libipvs ( #101 )
...
* Use libnetwork/ipvs alternative
* PR image tag simplification
* Remove nested vendor directories
2017-08-04 14:07:57 -05:00
Bryan Zubrod
f8174a66be
network_route_controller: Avoid redundant policy sets ( #98 )
...
* gofmt
* route_controller: Avoid redundant DefinedSet adds
2017-08-03 02:49:20 -05:00
Bryan Zubrod
f9ae00be10
Use vendored gobgp to build gobgp client ( #95 )
...
gobgp client inside the kube-router container will now always be in sync with the gobgp library used to build the kube-router binary
2017-08-02 10:02:21 -05:00
Murali Reddy
3b1257c0a3
adding explicit --kubeconfig param in example daemonset manifests
...
We removed implicit fallback to use /var/lib/kube-router/kubeconfig with the commit ccbba72
So kube-router takes explicit --master or --kubeconfig argument or implicitly try to use incluster configuration
v0.0.10
2017-08-01 16:59:45 +05:30
Murali Reddy
b77c28fc35
Update README.md
2017-08-01 14:51:13 +05:30
Murali Reddy
f5e518e2d6
Merge pull request #91 from cloudnativelabs/90-network-policy-ga
...
Netork policy GA: select all pods in namespace if pod selector is not specified in the network policy spec
2017-07-31 23:14:43 +05:30
Murali Reddy
279bc66a99
Netork policy GA: select all pods in namespace if pod selector is not specified in the network policy spec
...
as per semantics https://kubernetes.io/docs/api-reference/v1.7/#networkpolicy-v1-networking
Fixes #90
2017-07-31 22:47:43 +05:30
Murali Reddy
562008ca8f
Merge pull request #83 from dimm0/feature/inclusterconfig
...
Using inclusterconfig for default configuration
2017-07-29 21:05:09 +05:30
Dmitry Mishin
8d2ed48f22
Either of the --master or --kubeconfig is sufficient
2017-07-29 08:14:43 -07:00
Murali Reddy
909c24d9d3
Merge pull request #86 from cloudnativelabs/85-network-policy-ga
...
GA network policy does not reject if there is not a single source pod matching a policy
2017-07-29 18:14:50 +05:30
Murali Reddy
922c9f5808
GA network policy does not reject if there is not a single source pod matching a policy
...
Fix ensures below two cases are explicitly handled
- in the network policy spec for the ingress rule, its optionsl to give 'ports' and 'from' details
when not specified it translates to match all ports, match all sources respectivley
- user may explicitly give the 'ports' and 'from' details in the ingress rule. But at any given point
its possible there is no matching pods (with labels defined in 'from') in the namespace.
Before the fix both the cases were handled similarly resulting in unexpected behaviour
Fixes #85
2017-07-29 16:53:52 +05:30
Dmitry Mishin
1d62de7159
Merge branch 'master' into feature/inclusterconfig
2017-07-28 12:14:44 -07:00
Dmitry Mishin
ccbba7206d
Using inclusterconfig for default configuration
2017-07-28 11:45:23 -07:00
Murali Reddy
c85e02a061
Update README.md
2017-07-28 14:38:41 +05:30
Murali Reddy
c1a4e65a35
Update README.md
2017-07-28 14:37:50 +05:30
Murali Reddy
7d2d5b4ebb
update readme to mention support for network policy GA
2017-07-28 14:35:45 +05:30
Murali Reddy
c0a14e8ebc
Merge pull request #82 from cloudnativelabs/network-policy-ga
...
support for network policy GA
2017-07-28 14:34:21 +05:30
Murali Reddy
b4c063ee8a
support for network policy GA
...
with this refactoring support for network policy V1 (or GA) is added.
Changes are backward compatible so beta network policy semantics
are still available for k8s ver 1.6.* and less
Fixes #16
2017-07-28 11:12:52 +05:30
Murali Reddy
8a3d6c01a7
Merge pull request #81 from cloudnativelabs/cleanup-config
...
fix null pointer dereference during kube-router --cleanup-config
2017-07-27 23:35:07 +05:30
Murali Reddy
a86bc44ecc
fix null pointer dereference during kube-router --cleanup-config
...
Fixes #79
2017-07-27 23:24:03 +05:30
Murali Reddy
c64b72e4a3
Merge pull request #76 from cloudnativelabs/aws-src-dst-check
...
fix Source/destination check disable logic
2017-07-21 15:43:36 +05:30
Murali Reddy
449f1bfcc6
fix Source/destination check disable logic
2017-07-21 15:20:42 +05:30
Murali Reddy
04d0ed3be8
Merge pull request #74 from cloudnativelabs/prometheus
...
WIP prometheus metrics: add pps in and out per service backend
2017-07-20 01:30:48 +05:30
Murali Reddy
ef66b01002
WIP prometheus metrics: add pps in and out per service backend
2017-07-20 01:01:38 +05:30
Murali Reddy
84e0357977
Merge pull request #73 from cloudnativelabs/export_policy
...
BGP export polices to advertise routes so that extra hop is avoided
2017-07-19 22:08:16 +05:30
Murali Reddy
83ca0c42d7
BGP export polices to advertise routes so that extra hop is avoided
...
Fixes #71
2017-07-19 21:13:03 +05:30
Murali Reddy
3f062f2828
fixing regression due to #71
v0.0.9
2017-07-18 05:57:29 +05:30
Murali Reddy
082efddf90
Merge pull request #72 from cloudnativelabs/bgp-export-policies
...
add a BGP export policy on each node so that, learned routes from iBGP peers are never advertised to global peer
v0.0.8
2017-07-18 04:12:30 +05:30
Murali Reddy
e3ea82a1d1
add a BGP export policy on each node so that, learned routes
...
from iBGP peers are never advertised to global peer
Fixes #71
2017-07-18 04:04:30 +05:30
Murali Reddy
e8ce4a96ce
Merge pull request #70 from cloudnativelabs/route-cleanup
...
on BGP peer down, advertised route from peer is not cleaned-up in local routing table
2017-07-17 09:26:13 +05:30
Murali Reddy
fb09646212
on BGP peer down, advertised route from peer is not cleaned-up in local routing table
...
Fixes #69
2017-07-17 09:20:11 +05:30
Murali Reddy
8023021c38
Merge pull request #65 from cloudnativelabs/prometheus
...
WIP : Expose active/inactive connection to service backend as prometheus metrics
2017-07-16 03:42:33 +05:30
Murali Reddy
60482bcd4c
WIP : Expose active/inactive connection to service backend as prometheus metrics
...
putting basic skelton framework to use prometheus
Fixes #5
2017-07-16 03:11:13 +05:30