Erwan Miran
|
80cfeea957
|
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
|
2018-08-22 18:16:13 +02:00 |
Wong Hoi Sing Edison
|
538cb3b1bd
|
weave: Upgrade to 2.4.0
Upstream Changes:
- weave 2.4.0 (https://github.com/weaveworks/weave/releases/tag/v2.4.0)
- Support `externalTrafficPolicy: Local` (https://github.com/weaveworks/weave/issues/2924)
- Make the ipset list size bigger (https://github.com/weaveworks/weave/pull/3305)
- Break out of kube rm-peers loop if nothing changes (https://github.com/weaveworks/weave/pull/3317)
Our Changes:
- Revamp weave-net.yml.j2 with upstream changes
- Add more variables for customization
- Replace WEAVE_PASSWORD with k8s secret
- Remove hard-corded seed mode support, in favor of variables customization
|
2018-08-07 18:34:51 +08:00 |
Matthew Mosesohn
|
03bcfa7ff5
|
Stop templating kube-system namespace and creating it (#2545)
Kubernetes makes this namespace automatically, so there is
no need for kubespray to manage it.
|
2018-03-30 14:29:13 +03:00 |
|
Wong Hoi Sing Edison
|
848fc323db
|
Fixup for #2523:
- Rename template for /etc/cni/net.d/00-weave.conflist to 00-weave.conflist.j2
- Apply resources requests/limits to both container weave and weave-npc
|
2018-03-28 11:16:42 +08:00 |
|
Wong Hoi Sing Edison
|
3f5c60886b
|
Upgrade Weave to 2.2.1
- Fix #2414, so namespace isolation should now works
- Update weave-net.yml.j2 as per latest https://cloud.weave.works/k8s/net
- Other minor fixup
|
2018-03-24 17:27:12 +08:00 |
woopstar
|
3289472e31
|
Added option to set MTU on Weave
|
2018-02-05 10:23:48 +01:00 |
Aivars Sterns
|
5e558c361b
|
update weave-net to 2.0.5 version (#1877)
|
2017-11-13 16:11:47 +00:00 |
Matthew Mosesohn
|
b294db5aed
|
fix apply for netchecker upgrade (#1659)
* fix apply for netchecker upgrade and graceful upgrade
* Speed up daemonset upgrades. Make check wait for ds upgrades.
|
2017-09-15 13:19:37 +01:00 |
|
Matthew Mosesohn
|
660282e82f
|
Make daemonsets upgradeable (#1606)
Canal will be covered by a separate PR
|
2017-09-04 11:30:01 +03:00 |
|
Matthew Mosesohn
|
6bb3463e7c
|
Enable scheduling of critical pods and network plugins on master
Added toleration to DNS, netchecker, fluentd, canal, and
calico policy.
Also small fixes to make yamllint pass.
|
2017-08-24 10:41:17 +01:00 |
timtoum
|
3e457e4edf
|
Enable weave seed mode for kubespray (#1414)
* Enable weave seed mode for kubespray
* fix task Weave seed | Set peers if existing peers
* fix mac address variabilisation
* fix default values
* fix include seed condition
* change weave var to default values
* fix Set peers if existing peers
|
2017-07-26 19:09:34 +03:00 |
|
Matthew Mosesohn
|
29fd957352
|
Enable weave upgrade from previous versions
Raise readiness probe initial time to 60 (was 30)
|
2017-02-09 21:39:31 +03:00 |
|
Matthew Mosesohn
|
39d87a96aa
|
Rename weave-kube to weave-net
Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
|
2017-01-31 18:47:27 +03:00 |