24 Commits

Author	SHA1	Message	Date
Hussein Galal	763188d642	V1.32.0+k3s1 (#11478) ... * Update libraries and codegen for k8s 1.32 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> Signed-off-by: Brad Davidson <brad.davidson@rancher.com> * Fixes for 1.32 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> Signed-off-by: Brad Davidson <brad.davidson@rancher.com> * Disable tests with down-rev agents These are broken by AuthorizeNodeWithSelectors being on by default. All agents must be upgraded to v1.32 or newer to work properly, until we backport RBAC changes to older branches. Signed-off-by: Brad Davidson <brad.davidson@rancher.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> Signed-off-by: Brad Davidson <brad.davidson@rancher.com> Co-authored-by: Brad Davidson <brad.davidson@rancher.com>	2024-12-20 23:17:14 +02:00
manuelbuil	536fa44eb0	Revert "Make svclb as simple as possible" ... This reverts commit 1befd65a0a. Signed-off-by: manuelbuil <mbuil@suse.com>	2024-10-15 20:30:03 +02:00
manuelbuil	660c6052c2	Make svclb as simple as possible ... Signed-off-by: manuelbuil <mbuil@suse.com>	2024-10-11 10:52:47 +02:00
Alireza Eskandari	22fb7049bd	Add tolerations support for DaemonSet pods ... Signed-off-by: Alireza Eskandari <alireza.eskandari@wsd.com>	2024-08-12 13:01:27 -07:00
Brad Davidson	bffdf463e1	Fix cloudprovider controller name ... Looking at metrics revealed the cloudprovider controller name was anempty string. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2024-07-29 21:54:20 -07:00
Brad Davidson	d4c3422a85	Fix ipv6 sysctl required by non-ipv6 LoadBalancer service ... This is a partial revert of 095ecdb034, with the workaround moved into klipper-lb. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2024-07-24 13:40:33 -07:00
Brad Davidson	21611c5665	Cap length of generated name used for servicelb daemonset ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2024-07-24 13:40:33 -07:00
Brad Davidson	37f97b33c9	Add support for svclb pod PriorityClassName ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2024-05-23 14:11:15 -07:00
Brad Davidson	095ecdb034	Fix issue with local traffic policy for single-stack services on dual-stack nodes. ... Just enable IP forwarding for all address families regardless of service address families. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2024-05-23 13:54:30 -07:00
Hussein Galal	144f5ad333	Kubernetes V1.30.0-k3s1 (#10063) ... * kubernetes 1.30.0-k3s1 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update go version to v1.22.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update dynamiclistener and helm-controller Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update go in go.mod to 1.22.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update go in Dockerfiles Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update cri-dockerd Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Add proctitle package with linux and windows constraints Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * go mod tidy Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Fixing setproctitle function Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update dynamiclistener to v0.6.0-rc1 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	2024-05-06 19:42:27 +03:00
Derek Nola	14f54d0b26	Transition from deprecated pointer library to ptr (#9801) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	2024-03-28 10:07:02 -07:00
Manuel Buil	3b4f13f28d	Update klipper-lb image version ... Signed-off-by: Manuel Buil <mbuil@suse.com>	2024-03-01 11:28:12 +01:00
Brad Davidson	a27d660a24	Add ServiceLB support for PodHostIPs FeatureGate ... If the feature-gate is enabled, use status.hostIPs for dual-stack externalTrafficPolicy=Local support Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2024-01-02 16:00:09 -08:00
Jason Costello	07ee854914	Tweaked order of ingress IPs in ServiceLB (#8711) ... * Tweaked order of ingress IPs in ServiceLB Previously, ingress IPs were only string-sorted when returned Sorted by IP family and string-sorted in each family as part of filterByIPFamily method * Update pkg/cloudprovider/servicelb.go * Formatting Signed-off-by: Jason Costello <jason@hazy.com> Co-authored-by: Brad Davidson <brad@oatmail.org>	2023-11-15 14:33:31 -08:00
Brad Davidson	aa76942d0f	Add FilterCN function to prevent SAN Stuffing ... Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-08-02 11:15:39 -07:00
Yuxing Deng	b64a226ebd	Make LB image configurable when compiling k3s ... It is no way we can configure the lb image because it is a const value. It would be better that we make it variable value and we can override the value like the `helm-controller` job image when compiling k3s/rke2 Signed-off-by: Yuxing Deng <jxfa0043379@hotmail.com>	2023-05-31 08:51:13 -07:00
Brad Davidson	93279d2f59	Bump klipper-lb to v0.4.4 ... Fixes issue with localhost access to ServiceLB when ExternalTrafficPolicy=Local Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-05-30 17:38:59 -07:00
Hussein Galal	30638072c9	Update klipper lb to v0.4.2 (#7210) ... * Update klipper lb to v0.4.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update klipper lb to v0.4.3 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update klipper lb to v0.4.3 in airgap list Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	2023-04-06 19:02:00 +02:00
Brad Davidson	cc333d8d0c	Fix ServiceLB dual-stack ingress IP listing ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-02-21 14:13:22 -08:00
Brad Davidson	c6d0afd0cb	Check for existing resources before creating them ... Prevents errors when starting with fail-closed webhooks Also, use panic instead of Fatalf so that the CloudControllerManager rescue can handle the error Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-02-09 15:20:49 -08:00
Brad Davidson	369b81b45e	Honor Service ExternalTrafficPolicy ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2023-01-27 12:09:18 -08:00
Brad Davidson	a07bb555ba	Bump klipper-helm and klipper-lb versions ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-11-23 14:55:59 -08:00
Brad Davidson	f25419ca2c	Add ServiceAccount for svclb pods ... For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-10-10 17:40:39 -07:00
Brad Davidson	0b96ca92bc	Move servicelb into cloudprovider LoadBalancer interface ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-09-30 08:17:20 -07:00