andata
/
rke2-charts
mirror of https://git.rancher.io/rke2-charts
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
711 Commits
4 Branches
0 Tags
40 MiB
Commit Graph

510 Commits (96d776edc5ed3dc43ffd102d5490d2096810a9d4)

Author SHA1 Message Date
Dan 7f62087ea0
increment package version 2022-08-31 12:04:20 -04:00
Dan 317f4c59ad
Correct cilinium preflight charts 
This changes the cilium preflight image format to match the one we use when consuming the image.
 2022-08-31 11:58:36 -04:00
Roberto Bonafiglia 91ac8d9e72 Updated Calico to 3.23.3 and Flannel to 0.19.1 on Canal 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-08-19 10:26:00 +02:00
Manuel Buil 6e62c2be06 Update Cilium and remove the node-init daemonSet 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-08-17 17:56:11 +02:00
Derek Nola 64be947c04
Merge pull request #277 from ron1/rke2-calico-felix-cfg-additions 
Updated calico chart to expose felix cfg props exposed in canal
 2022-08-01 08:52:10 -07:00
Roberto Bonafiglia 576a0d9e5a Updated cilium to 1.12.0 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-07-26 17:24:27 +02:00
chrisho 707d37c9a1 bump harvester cloud provider 0.1.13 2022-07-07 10:11:12 -07:00
ron1 c4ba0d539d Updated calico chart to expose felix config properties exposed in canal chart 2022-07-06 07:57:37 -04:00
Derek Nola 5dfd3f5ea8 Remove hostNetwork change 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2022-06-27 13:49:14 -07:00
Matt Trachier b1eb59a8ee
rke2 june release (#275) 2022-06-17 13:20:04 -05:00
Roberto Bonafiglia da84464275 Updated cilium chart to support IPv6 only config 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-06-16 17:12:29 +02:00
Brad Davidson ae2d7aff62 Bump coredns and update resources 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-06-14 13:12:13 -07:00
Manuel Buil 131037c5d6
Merge pull request #272 from thomasferrandiz/add-whereabouts-cni 
add whereabouts CNI as a dependency of the multus chart
 2022-06-13 09:11:13 +02:00
Thomas Ferrandiz 1d916f4a78 add whereabouts CNI as a dependency of the multus chart 2022-06-10 17:57:09 +02:00
Brooks Newberry 49daf82ab7
kube-proxy use hardened-kubernetes v1.21.13-rke2r2 2022-06-08 14:41:26 -06:00
Brooks Newberry e5eb8e5b6c
Bump ingress-nginx tag to nginx-1.2.1-hardened7 (#270) 2022-06-08 13:34:50 -07:00
Brooks Newberry 08696ce600
update kube-proxy for v1.21.13-rke2r1 2022-05-24 18:12:55 -07:00
Roberto Bonafiglia 34d8771f0b Fixed calico chart for dualstack 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-24 11:44:11 +02:00
Manuel Buil 2a79081adc Update to cilium 1.11.5 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-24 10:07:43 +02:00
Roberto Bonafiglia 022d0ba55e
Merge pull request #265 from rbrtbnfgl/calico-fix-ipvalue 
Fixed calico chart when IPpool configured as value
 2022-05-24 09:48:39 +02:00
Roberto Bonafiglia 190a6bbb7f Fixed calico chart when IPpool configured as value 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-23 22:41:45 +02:00
Roberto Bonafiglia b2dd1c37fb Fixed Canal for IPv6 only setup 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-23 20:44:08 +02:00
Roberto Bonafiglia 76b39c3da7 Updated calico to 3.23.1 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-19 21:40:29 +02:00
Roberto Bonafiglia 72e15c46b9 Added tigera-operator namespace 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-19 16:50:41 +02:00
Manuel Buil 492e62f90a
Merge pull request #261 from manuelbuil/add_whereabouts 
Start consuming upstream rke2-multus chart
 2022-05-16 14:50:44 +02:00
Manuel Buil 2002dc37d5 Start consuming upstream rke2-multus chart 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-13 18:09:18 +02:00
Manuel Buil 6b2024824c Fix flexvolumepath 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-13 11:10:20 +02:00
Manuel Buil 3e88581902 Fix calico bug 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-13 09:47:40 +02:00
Roberto Bonafiglia 3e64875d53 Fixed dualstack config 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-12 12:32:31 +02:00
Roberto Bonafiglia d0394665b5 Updated calico to 3.23.0 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-12 12:32:27 +02:00
Manuel Buil 893ee38a03 Add a default flexVolumePluginDir 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-11 14:45:53 +02:00
Manuel Buil 8c5cacb155 Update Calico-1.21 and 1.22 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-11 12:15:41 +02:00
Roberto Bonafiglia e7c0fed30f
Merge pull request #253 from rbrtbnfgl/calico-ipv6 
Updated calico chart to support IPv6 only setup
 2022-05-10 09:05:05 +02:00
Manuel Buil 65d8377714 Update Canal to v3.22.2 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-09 19:17:52 +02:00
Roberto Bonafiglia e885a82b1e Updated calico chart to support IPv6 only setup 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-05-09 11:50:06 +02:00
Jamie Phillips a0e996b1d9
Updating the vSphere CPI chart to add the 1.23 images. (#250) 
This update adds the official 1.23 images that were released. This allows bumping the skew policy to add support for 1.24.
 2022-05-06 09:00:21 -07:00
Manuel Buil 5d397527ee
Merge pull request #252 from manuelbuil/update-calico-3222 
Update calico to 3.22.2
 2022-05-06 16:48:29 +02:00
Manuel Buil 80c1dceacd Update calico to 3.22.2 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-06 10:54:43 +02:00
Manuel Buil e79aa5c225 Update Cilium to 1.11.4 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-06 10:32:57 +02:00
Manuel Buil a1951cdde1
Merge pull request #249 from manuelbuil/update_multus 
Update multus images
 2022-05-04 17:37:00 +02:00
Manuel Buil 742b41fd45 Update multus images 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-04 11:14:05 +02:00
Roberto Bonafiglia 58daa54259
Merge pull request #246 from rbrtbnfgl/canal-ipv6 
Updated canal chart for ipv6 only config
 2022-05-04 10:39:58 +02:00
Brooks Newberry aa2b6613e4
update kube-proxy for v1.21.12-rke2r2 2022-05-03 07:55:12 -07:00
Brad Davidson b799d89a27 Remove accidentally committed .orig files from rke2-ingress-nginx 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-05-02 12:23:13 -07:00
Roberto Bonafiglia 9540746eaa Updated canal chart for ipv6 only config 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-04-27 15:13:22 +02:00
Hussein Galal 50802110c4
Upgrade Nginx chart to 4.1.0 (#245) 
* Upgrade Nginx chart to 4.1.0

* Fixing specifying chrooted image

* update controller image to hardened6
 2022-04-26 04:34:15 +02:00
Manuel Buil 489763529c Disable calico api 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-04-21 17:15:01 +02:00
Nikolai Shields afb5d2e0ed
update kube-proxy for v1.21.12-rke2r1 (#243) 2022-04-20 12:54:06 -05:00
guangbochen a844a1c271 Bump Harvester csi driver to v0.1.11 2022-04-15 02:56:23 -07:00
yaocw2020 7581ae4ae1 Bump harvester cloud provider 0.1.11 
Signed-off-by: yaocw2020 <yaocanwu@gmail.com>
 2022-04-14 12:28:52 -07:00
Manuel Buil f525894f98 Fix Cilium typo 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-04-11 15:54:46 +02:00
Manuel Buil 1420c033d1 Add automatic support for dual-stack 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-04-11 12:07:40 +02:00
Jamie Phillips fe027b4e95
Updating to the latest version for both charts. (#238) 2022-04-04 07:21:35 -07:00
Sakala Venkata Krishna Rohit a1a53a1c74
Update nginx to hardened4 (#236) 2022-03-23 20:54:56 +02:00
Jamie Phillips 0425b23746
Updating to CSI 2.5.0 from vSphere Charts to support 1.23. (#235) 2022-03-21 19:41:32 -07:00
Jamie Phillips e46592f4a3
Updating CPI to have an image override to use 1.22 on 1.23. (#234) 2022-03-21 15:23:37 -07:00
Brad Davidson cdb3321a9d Bump rke2-coredns chart 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-03-18 13:42:33 -07:00
Jossemar Cordero 91f93f36d4
Merge pull request #232 from jossemargt-3pillar/rke2_march_release_v1.21.11 
Update 1.21.11 kube-proxy charts
 2022-03-17 10:46:37 -06:00
Jonnatan Jossemar Cordero bf511d02d0 Update 1.21.11 kube-proxy charts 
Signed-off-by: Jonnatan Jossemar Cordero <jonnatan.cordero@suse.com>
 2022-03-17 09:40:20 -06:00
Roberto Bonafiglia f9fded3809 Fixed canal chart version 2022-03-17 15:44:55 +01:00
Roberto Bonafiglia 61a8694a9e Updated canal chart version 2022-03-17 15:30:32 +01:00
Roberto Bonafiglia d297176116 Added resource on clusterRole create and update 2022-03-17 14:50:26 +01:00
Roberto Bonafiglia 4c98d1e709 Updated version 2022-03-17 14:24:59 +01:00
Roberto Bonafiglia cd9344bb9f Added caliconodestatuses resource on canal clusterRole 2022-03-17 14:12:35 +01:00
Manuel Buil 599b737524 Update flannel version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-03-17 10:24:39 +01:00
Manuel Buil 8ae028906a Update Cilium to 1.11.2 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-03-15 10:31:36 +01:00
Manuel Buil c1de89a662 Change Cilium to consume all variables 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-03-14 17:14:12 +01:00
yaocw2020 e1a5bd746b Bump harvester-cloud-provider 0.1.10 
Related issue:
https://github.com/rancher/rancher/issues/36716
https://github.com/harvester/harvester/issues/1999

Signed-off-by: yaocw2020 <yaocanwu@gmail.com>
 2022-03-10 20:14:21 -08:00
Brian Downs 7b2f16e3a6
update charts for 1.21 (#226) 2022-03-09 17:52:06 -07:00
Manuel Buil 75e9c8ed02 Fix Calico bug 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-03-08 18:32:52 +01:00
Canwu Yao f50983fd3e
Bump harvester-cloud-provider and harvester-csi-driver (#224) 2022-03-07 11:34:40 -07:00
Brad Davidson 36780fb35d Add packaging for vsphere charts from rancher/vsphere-charts repo 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-03-04 16:36:10 -08:00
thomasferrandiz d22aebd684 bump calico to v3.21.4-build20220228 2022-02-28 15:33:52 +01:00
Brian Downs 6c4050cdbf
update to new k8s build (#221) 2022-02-18 14:39:14 -07:00
Brian Downs 942cd5a63a
update kube-proxy for February rke2 release (#220) 2022-02-17 14:17:23 -07:00
Manuel Buil b8a6ec2071 Add calico kube-controllers 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-02-08 18:08:31 +01:00
Roberto Bonafiglia c6dd58fcff Updated calico to version 3.22.0 2022-02-07 15:59:39 +01:00
Manuel Buil df18e2b085 Add missing CRDs to canal 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-02-04 09:33:30 +01:00
Manuel Buil c9fa5045a5
Merge pull request #216 from rbrtbnfgl/update-calico-3.21.4 
Update calico chart to version 3.21.4
 2022-02-01 12:46:13 +01:00
Roberto Bonafiglia 85c4b17bac Update calico chart to version 3.21.4 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-01-27 17:56:54 +01:00
n-guitar 901010895f Update package.yaml 
Delete unnecessary version information.
Update packageVersion.
 2022-01-27 14:06:07 +09:00
n-guitar 3120f03b6a
Merge branch 'main-source' into canal/add-option 2022-01-26 15:55:00 +09:00
Michal Rostecki 83ed370956 cilium: Update to 1.11.1 
https://github.com/cilium/cilium/releases/tag/v1.11.1

Ref: rancher/rke2#2242
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-20 12:14:17 +01:00
Michal Rostecki e740d3623e cilium: Remove values.schema.json 
That file doesn't seem to be used anywhere.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-20 12:14:17 +01:00
Michal Rostecki 4b7b81ae64 cilium: Fix the usage of `system_default_registry` template 
Before this change, we tried to include `system_default_registry`
template inside `cilium.image`. But it seems like nested templates can't
access Values. This change fixes that by using `system_default_registry`
directly in yaml manifests.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-20 12:02:27 +01:00
Brian Downs 3dd3fe9fb1
update RKE2 k8s version for January release (#214) 2022-01-19 14:36:39 -07:00
Manuel Buil bd491f566c Update flannel and calico to latest in canal 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-01-19 09:56:19 +01:00
Michal Rostecki 0f9b68aa21
Merge pull request #211 from vadorovsky/cilium-1.11.0 
Update Cilium to 1.11.0
 2022-01-18 19:17:57 +01:00
Michal Rostecki a4535f12ca Update Cilium to 1.11.0 
Update Cilium from 1.10.4 to 1.11.0.

https://github.com/cilium/cilium/releases/tag/v1.11.0

Ref: rancher/rke2#2242
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-18 19:11:56 +01:00
Manuel Buil 719a7f8982 Update Chart.yaml with the newer version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-01-14 18:56:57 +01:00
Manuel Buil 9ac27413d4 Provide dual-stack support to canal 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-01-14 18:22:13 +01:00
n-guitar dfde82c73e Change packageVersion 2022-01-08 19:13:40 +09:00
n-guitar 1a9b296d9e Add option IP autodetection methods 
See below for a detailed explanation of the options.
https://projectcalico.docs.tigera.io/reference/node/configuration#ip-autodetection-methods
 2022-01-08 19:05:41 +09:00
Brad Davidson 9a85dd4264 Bump rke2-kube-proxy-1.21 to v1.21.8-rke2r2-build20220107 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-07 12:17:20 -08:00
Brad Davidson 0877bb897d Bump rke2-kube-proxy-1.20 to v1.20.14-rke2r2-build20220107 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2022-01-07 12:15:29 -08:00
Manuel Buil f36605a9a7
Merge pull request #204 from manuelbuil/testing_calico_update 
Upgrade Calico to v3.21.2
 2022-01-05 19:03:07 +01:00
Manuel Buil fb75694a15 Remove dual-stack logic from 1.19&1.20 canal chart 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-12-23 17:12:20 +01:00
Manuel Buil 52525e8210 Testing Calico update 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-12-22 09:37:00 +01:00
Brad Davidson 86939328e4 Bump rke2-kube-proxy-1.21 to v1.21.8-rke2r1-build20211215 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-12-15 13:54:54 -08:00
Brad Davidson 99369b630e Bump rke2-kube-proxy-1.20 to v1.20.14-rke2r1-build20211215 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-12-15 13:53:39 -08:00
yaocw2020 30af4a5dc0 Bump harvester cloud provider and harvester csi driver 2021-12-15 11:51:10 -08:00
Brad Davidson c717159844 Bump rke2-kube-proxy-1.21 to v1.21.7-rke2r3-build20211210 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-12-10 13:02:12 -08:00
Brad Davidson 619c880aad Bump rke2-kube-proxy-1.20 to v1.20.13-rke2r2-build20211210 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-12-10 12:18:49 -08:00
Brian Downs e59dcf0f8d update rke2 v1.21.7 r2 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-12-06 11:08:52 -07:00
Brian Downs 9aff0f37fd
update k8s rke2 (#193) 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-11-29 18:14:17 -07:00
Brad Davidson 55d482cd21 Update patches for new upstream chart version 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-11-22 16:24:29 -08:00
Brad Davidson a9fd3f16f4 Bump nginx to -hardened2 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-11-19 15:56:20 -08:00
Brad Davidson 1bf8db05be Bump image tags for golang bumps 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-11-19 15:15:21 -08:00
raulcabello c5db1441a3 bump coredns and cluster autoscaler 2021-11-18 16:58:06 +01:00
raulcabello 25f6e0ab85 bump coredns version to fix validation 2021-11-18 16:55:09 +01:00
Olli Janatuinen e4709d1a2d Bump coredns to 1.16.4 
Signed-off-by: Olli Janatuinen <olli.janatuinen@gmail.com>
 2021-11-16 00:43:14 -08:00
Brian Downs 31f0cd50c9
bump versions for v1.21.6 r2 rc1 (#186) 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-11-15 13:45:37 -07:00
yaocw2020 1921151524 Bump harvester csi driver 0.1.4 2021-11-02 09:13:38 -07:00
yaocw2020 fc7304e1bf Bump harvester cloud provider 0.1.3 2021-11-02 09:13:38 -07:00
Manuel Buil 9bdcd5a037
Merge pull request #180 from manuelbuil/update_calico 
Update Calico version
 2021-10-29 08:48:18 +02:00
Brad Davidson 33514b1b29 Bump rke2-kube-proxy-1.21 to v1.21.6-rke2r1-build20211028 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-28 09:17:37 -07:00
Brad Davidson 64dbc6cf0c Bump rke2-kube-proxy-1.20 to v1.20.12-rke2r1-build20211028 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-28 09:16:26 -07:00
Brad Davidson 9e150636a4 Bump rke2-kube-proxy-1.19 to v1.19.16-rke2r1-build20211028 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-28 09:16:12 -07:00
Manuel Buil beaf5319a3 Update Calico version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-27 15:34:51 +02:00
Brad Davidson d040576117 Bump rke2-kube-proxy-1.19 to v1.19.15-rke2r3-build20211026 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-26 13:35:34 -07:00
Brad Davidson bf6bc287d5 Bump rke2-kube-proxy-1.20 to v1.20.11-rke2r3-build20211026 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-26 13:35:22 -07:00
Brad Davidson 5556533b9f Bump rke2-kube-proxy-1.21 to v1.21.5-rke2r3-build20211026 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-26 13:34:46 -07:00
Manuel Buil bd17ad6852 Go back to name: rke2-canal in rke2-canal-1.19-1.20 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-22 18:55:20 +02:00
Manuel Buil 25f5fbe47b Fix bug in init container 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-22 18:01:11 +02:00
Manuel Buil fdbfacfc27 Fix bug in the chart name 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-22 16:05:27 +02:00
Manuel Buil 2a9084a456 Create a canal chart that uses v0.14.1 flannel release 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-22 10:24:50 +02:00
Brad Davidson fc5049e71e Add hostname anti-affinity rule 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-21 10:23:13 -07:00
Manuel Buil ca5fad89b9 Update the flannel image 
Move to v0.15.1 so that we can have the systemd problem fixed

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-21 17:01:47 +02:00
Hussein Galal f7c7fafdd6
Set allow snippet annotation to false (#170) 
* Set allow snippet annotation to false

* update package version to 05
 2021-10-08 20:46:17 +02:00
Manuel Buil 480ab7b766 Fix canal rbac 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-08 12:07:41 +02:00
Brad Davidson 6df1941922 Extend autoscaler health check times 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-07 16:38:18 -07:00
Matt Nikkel 63c6ad9005 Allow enabling Calico WireGuard encryption 
Provide Helm values and templates to allow easy Helm-based configuration
of Calico WireGuard encryption.

Signed-off-by: Matt Nikkel <matt.nikkel@rancherfederal.com>
 2021-10-07 16:36:22 -07:00
Hussein Galal 523e39ac18
Override watch ingress without class option (#166) 2021-10-07 23:50:41 +02:00
Brad Davidson 67f7e71724 Don't specify digest for certgen image 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-07 12:44:36 -07:00
Michal Rostecki cea6aace1b
Merge pull request #164 from vadorovsky/cilium-fix-mount-cgroup 
cilium: Fix image URI of mount-cgroup init container
 2021-10-07 18:04:17 +02:00
Manuel Buil bb84de8af6 Change the version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-07 12:51:18 +02:00
Michal Rostecki 924c5478e3 cilium: Fix image URI of mount-cgroup init container 
It was missing the system_default_registry tag.

Ref: #1894
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-10-07 12:42:20 +02:00
Manuel Buil 6e46cb5191 Update multus images for 1.22 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-07 12:06:26 +02:00
Brad Davidson 6b92466167 Bump chart version 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-06 17:22:52 -07:00
Brad Davidson efe188733d Bump flannel and calico images 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-06 16:54:29 -07:00
Brad Davidson c1d93543a9 Bump rke2-coredns images 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-10-06 16:46:34 -07:00
Michal Rostecki f83c330d57 rke2-cilium: Disable image digest usage 
Upstream Cilium helm chart looks for the specific image digest for a
given release. Since we use different mirrored images, we need to
disable that check on our side.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-10-06 16:35:52 -07:00
Hussein Galal 362643fe48
fix typo (#157) 2021-10-07 00:09:14 +02:00
Hussein Galal 31f99e6746
Upgrade nginx controller to v1.0.2 (#156) 
* Upgrade nginx controller to v1.0.2

* Add newline to _helpers.tpl

* Add newline to values.yaml
 2021-10-06 23:42:18 +02:00
Manuel Buil 5d2e12caa9
Merge pull request #154 from manuelbuil/update_calico_version 
Update calico to 1.20.1 version
 2021-10-06 11:09:22 +02:00
Manuel Buil 97706ffd8a Update calico to 1.20.1 version 
This version works with k8s 1.22

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-10-05 20:28:10 +02:00
dereknola be2e6cb284 Bump all rke2-kube-proxy packages to rke2r2 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-10-04 15:47:15 -07:00
Derek Nola faa7277df0
Merge pull request #153 from dereknola/metric_122 
Update rke2-metrics-server to v0.5.0
 2021-10-01 12:06:07 -07:00
dereknola 2d2a5edab5 Update rke2-metrics-server to v0.5.0 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-10-01 11:33:04 -07:00
Brad Davidson 1b70ad7d67 Fix canal network configuration when ipv6 not enabled 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-09-30 15:20:47 -07:00
Manuel Buil f7dcec64b6 Fix deprecated API in canal 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-09-29 09:44:21 +02:00
Manuel Buil 8ad6d4f0ed Provide dual-stack support for canal 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-09-28 16:45:31 +02:00
Manuel Buil 02ea411afd Explicitely disable encapsulation in dual-stack 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-09-24 09:50:17 +02:00
dereknola de3c422c54 Update rke2-kube-proxy to new images for v1.19, v1.20, v1.21 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-09-16 11:31:17 -07:00
Manuel Buil e898161f65
Merge pull request #138 from manuelbuil/calico-dual-stack 
Add support for dual-stack in Calico chart
 2021-09-16 12:13:39 +02:00
Michal Rostecki 7be6855132 cilium: Fix the eni value 
The upstream Cilium chart changed the type of `eni` value to a nested
object. Adjust our rke2-cilium chart to that change.

Ref: rancher/rke2#1615

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-09-13 09:44:44 +02:00
dereknola 3107aa319b Update kubeproxy image to v1.21.4+rke2r4 
Signed-off-by: dereknola <derek.nola@suse.com>
 2021-09-09 10:54:18 -07:00
Michal Rostecki 8e4234f309
Merge pull request #143 from vadorovsky/cilium-1.10.4 
cilium: Update to 1.10.4
 2021-09-09 00:57:30 +02:00
Canwu Yao 96dced93c4
Add harvester-cloud-provider and harvester-csi-driver (#140) 
* Add the pakcage.yaml for harvester-cloud-provider
* Add the pakcage.yaml for harvester-csi-driver
 2021-09-07 13:08:27 -07:00
Manuel Buil 5024f51679 Add support for dual-stack in Calico chart 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-09-06 17:15:49 +02:00
Michal Rostecki 3f615ba055 cilium: Update to 1.10.4 
Update Cilium from 1.9.8 to 1.10.4. Changelog:

https://github.com/cilium/cilium/releases/tag/v1.10.4

Ref: rancher/rke2#1615

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-09-06 14:58:35 +02:00
Hussein Galal de5dd4c9f4
Upgrade kubeproxy image to v1.21.4+rke2r3 (#141) 2021-09-02 01:56:54 +02:00
Brian Downs 58d5cc6e60
update rke2 image to r2 (#139) 2021-08-29 15:40:43 -07:00
Brian Downs 88de7d4247
update k8s to v1.21.4 (#137) 
* update k8s to v1.21.4
 2021-08-24 12:36:49 -07:00
Manuel Buil 2acb4d1979 Pass featureDetectOverride 
This fixes https://github.com/rancher/rke2/issues/1541 even for
kernel version > 5.7

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-23 12:12:45 +02:00
Brian Downs a7d060c644
Merge pull request #135 from briandowns/update_rke2-k8s_images 
update rke2 k8s patch version 1.19.14 and 1.20.10
 2021-08-20 17:07:06 -07:00
Brian Downs c1b2275d02 update rke2 k8s patch version 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-08-20 16:49:10 -07:00
Brad Davidson fe21c2d380 Add linux nodeSelector to coredns autoscaler and nodelocal pods 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-20 14:05:13 -07:00
Brad Davidson 550851f5b4 add linux nodeSelectors to charts 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-19 11:29:56 -07:00
Manuel Buil 215dea65b9 Change the name of the CR 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-12 19:54:07 +02:00
Manuel Buil 9601493243 Update calico chart with the latest version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-10 08:12:32 +00:00
Brad Davidson f56c44d57f Bump hardened-kubernetes to v1.21.3-rke2r2 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-09 21:58:28 -07:00
Brad Davidson 21ff5c1807 Bump versions for v1.19.13-rke2r2-build20210806 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-06 09:26:04 -07:00
Brad Davidson b96ced794f Bump versions for v1.20.9-rke2r2-build20210805 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-05 16:30:51 -07:00
Manuel Buil e853295c99 Increase memory resources for autoscaler 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-05 14:07:55 +02:00
Manuel Buil 20ec89d02a
Update rke2 calico config for Windows support (#124) 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-03 22:08:27 +02:00
Manuel Buil 0b61f9ec00 Update dns cache image 
The old image did not have iptables binaries in it which are needed

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-03 19:24:08 +02:00
Manuel Buil 0692021438 Update images to the hardened ones 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-08-02 19:40:30 +02:00
Erik Wilson 1ebb784e73
Bump ingress-nginx package version 2021-07-28 12:08:16 -07:00
Erik Wilson a830f361b2
Disable rke2-ingress-nginx service 2021-07-28 10:21:38 -07:00
Manuel Buil c9b8af1505 Modify the initImage 
* Use our mirrored busybox image
* Provide support for repos other than docker

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-27 11:08:32 +02:00
Manuel Buil 28dda9d869 Add nodelocal manifests 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-26 15:21:41 +02:00
Manuel Buil 86c0b73961 Update coredns helm version 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-23 11:48:33 +02:00
Manuel Buil 3d34528f6f
Merge pull request #116 from manuelbuil/coredns_autoscaler 
Activate dns autoscaler
 2021-07-23 10:17:55 +02:00
Brad Davidson 24f3bb329f Bump kube-proxy versions to GA build 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-07-21 10:49:56 -07:00
Hussein Galal f117ffb5b0
Use kubernetes image instead of kube-proxy image (#119) 2021-07-20 19:29:50 +02:00
Manuel Buil b421415617 Activate dns autoscaler 
* Add the image used by rke
* Enable it

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-20 11:18:17 +02:00
Hussein Galal b1cef5cf94
Update kube proxy versions (#117) 2021-07-19 18:43:49 +02:00
Manuel Buil 648dd29821 Update the Chart version too 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-14 20:40:33 +02:00
Manuel Buil 58ff6cb8f8 Move kube-proxy to newer images 
There is a fix in ip6tables in the new images.
New versions for 1.19, 1.20 and 1.21

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-14 19:25:38 +02:00
Erik Wilson 17f103cfed Update helm chart patches for ingress-nginx-3.34.0 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2021-07-08 16:50:22 -07:00
Erik Wilson 86fd87c666 Bump helm chart to ingress-nginx-3.34.0 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2021-07-08 16:50:22 -07:00
Manuel Buil 912b7362c7 Fix bug 
rke2-calico cni install does not honor global.systemDefaultRegistry

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-07-06 13:20:20 +02:00
Michal Rostecki ab9a260e3a multus: Make the daemonset init container privileged 
Before this change, the multus daemonset init container had troubles
with running with SELinux in enforced mode, due to lack of the
container_file_t label on the host /opt/cni/bin directory. Fix that by
making the container privileged.

Ref: rancher/rke2#746
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-06-23 18:48:32 +02:00
Jacob Blain Christen e3b5d78bee
Revert "rke2-kube-proxy: correct package name" (#109) 
This reverts commit 073d132f79.
 2021-06-17 16:37:09 -07:00
Jacob Blain Christen 2f0573a487
rke2-kube-proxy: correct package name (#108) 
Prevent package name inference on the rke2-kube-proxy-* sub packages
from being the directory name, but instead roll up to rke2-kube-proxy.
This should address assets showing up as
- `assets/rke2-kube-proxy-1.21/rke2-kube-proxy-v1.21.2-build2021061701.tgz`
instead of
- `assets/rke2-kube-proxy/rke2-kube-proxy-v1.21.2-build2021061701.tgz`
in the index.yaml.

Part of:
- https://github.com/rancher/rke2/issues/1146 (1.18.20)
- https://github.com/rancher/rke2/issues/1136 (1.19.12)
- https://github.com/rancher/rke2/issues/1135 (1.20.8)
- https://github.com/rancher/rke2/issues/845 (1.21.2)

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-06-17 15:58:51 -07:00
Jacob Blain Christen bd42264d93
rke2-kube-proxy: v1.21.2 (#107) 
Part of https://github.com/rancher/rke2/issues/845

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-06-17 14:52:23 -07:00
Jacob Blain Christen 28cf559202
rke2-kube-proxy: v1.20.8 (#106) 
Part of https://github.com/rancher/rke2/issues/1135

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-06-17 14:45:38 -07:00
Jacob Blain Christen 8cc846489a
rke2-kube-proxy: v1.19.12 (#105) 
Part of https://github.com/rancher/rke2/issues/1136

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-06-17 14:44:31 -07:00
Jacob Blain Christen 109ab8307a
rke2-kube-proxy: v1.18.20 (#104) 
Part of https://github.com/rancher/rke2/issues/1146

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-06-17 14:43:17 -07:00
Manuel Buil 1b08559044 Remove rke2-sriov charts 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-16 16:29:57 +02:00
Michal Rostecki 28a8f68301
Merge pull request #102 from manuelbuil/update-canal-images 
Upgrade flannel and calico images
 2021-06-14 15:06:49 +02:00
Manuel Buil 81102df041 Upgrade flannel and calico images 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-14 12:13:25 +02:00
Chris Kim 034d31da6b remove nameOverride from the ingress-nginx chart 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-06-07 11:24:27 -07:00
Michal Rostecki 81286de9e5 cilium: Update to 1.9.8 
Update Cilium from 1.9.6 to 1.9.8. Changelogs of the last two releases:

* https://github.com/cilium/cilium/releases/tag/v1.9.8
* https://github.com/cilium/cilium/releases/tag/v1.9.7

Ref: rancher/rke2#1099
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-06-07 18:59:31 +02:00
Manuel Buil e41a9179c3 Update Calico with the newer version 
This version fixes the problems we had:
1 - Image prefix no possible
2 - Images on 3.19.0 instead of 3.19.1

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-03 20:11:38 +02:00
Hussein Galal 12275df431
Add tolerations to network plugins and coredns (#98) 
* Add toleration for calico

* Add coredns tolerations

* Add multus tolerations

* Add sriov tolerations

* Add cilium tolerations

* fix sriov

* Fix coredns
 2021-05-27 21:12:25 +02:00
Michal Rostecki 4ece1471ec
Merge pull request #97 from manuelbuil/calico_update 
Update calico to 3.19
 2021-05-26 02:23:52 +02:00
Brad Davidson 991456c271 Split rke2-kube-proxy chart by release branch 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-25 14:32:27 -07:00
Manuel Buil d0a3cf2110 Update calico to 3.19 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-05-25 10:38:54 +02:00
Brad Davidson 2ddcaca3b8
[release-1.20] Do not quote kube-proxy config values of type bool (#94) 
* Set chart versions for 1.20

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-24 15:40:33 -07:00
Brad Davidson 55c01195e9 Set chart versions for 1.19 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-24 15:37:01 -07:00
Brad Davidson 46d09ceb73 Do not quote config values of type bool 
Validated against schema from
https://github.com/kubernetes/kube-proxy/blob/release-1.19/config/v1alpha1/types.go

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-24 15:37:01 -07:00
Jacob Blain Christen 15c781510b
kube-proxy: v1.21.1-build20210520 (#92) 
See rancher/rke2#845

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-20 17:01:55 -07:00
Jacob Blain Christen 1782f4798b
kube-proxy: v1.20.7 (#91) 
See rancher/rke2#951

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-20 16:51:33 -07:00
Jacob Blain Christen 4b46848ec8
kube-proxy: v1.19.11 (#90) 
See rancher/rke2#950

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-20 16:46:31 -07:00
Jacob Blain Christen 4571327ad0
kube-proxy: v1.18.19 (#89) 
See rancher/rke2#949

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-20 16:43:05 -07:00
Manuel Buil 5bd07b7b31 Revert "Fix bug when deploying with Cilium" 
This reverts commit 730b1f6398.
 2021-05-20 20:46:28 +02:00
Manuel Buil 730b1f6398 Fix bug when deploying with Cilium 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-05-19 17:07:04 +02:00
Jacob Blain Christen 80271b67d4
rke2-canal: fix use of coalesce (#85) 
Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-12 17:28:42 -07:00
Jacob Blain Christen 98bae75a63
rke2-canal: fix for templated config (#84) 
Seeing this error at runtime:
```
Error: parse error at (rke2-canal/templates/config.yaml:63): function "Values" not defined
```

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-12 17:02:02 -07:00
Jacob Blain Christen 56f06d2c47
rke2-kube-proxy: v1.21.2-build20210512 (#83) 
Signed-off-by: Jacob Blain Christen <jacob@rancher.com>
 2021-05-12 14:44:12 -07:00
Brad Davidson 68f04dcf40 Honor .Values.global.clusterCIDR in rke2-canal 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-05-12 14:11:03 -07:00
Erik Wilson 84edab15a9
Bump ingress-nginx package version 2021-05-11 10:14:53 -07:00
Erik Wilson d61ab34e6f
Update for rke2 ingress-nginx CI issues 2021-05-11 10:07:23 -07:00
Erik Wilson 1e40d7c975 Bump ingress-nginx chart 
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
 2021-05-07 13:18:57 -07:00
Brian Downs 09e1932f90 Update ingress-nginx chart. 
Update package version
Convert from deployment to daemonset
Enable host port

Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-05-06 13:05:17 -07:00
Manuel Buil 62da0673f7
Merge pull request #77 from manuelbuil/cidr_global_2 
Add pod_cidr option and systemDefaultRegistry
 2021-05-05 09:11:46 +02:00
Manuel Buil d0393b2489 Add pod_cidr option and systemDefaultRegistry 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-05-04 11:13:28 +00:00
Manuel Buil 797fa74eb5
Merge pull request #75 from mrostecki/cilium-selinux 
cilium: Make the wait-for-note-init container privileged
 2021-05-04 10:26:44 +02:00
Manuel Buil b8194ba10d
Merge pull request #72 from jcaamano/sriov 
Add multus & sr-iov charts
 2021-05-04 10:25:00 +02:00
Michal Rostecki 7b841da6e9 cilium: Make the wait-for-note-init container privileged 
Before this change, wait-for-node-init container was not able to execute
properly with SELinux enabled, due to lack of ability to access the bind
mounted file. Due to lack of ability to set the container_file_t label
through Kubernetes, the other possible solution, done in this commit, is
making the container privileged. All the other containers accessing the
bootstrap file are already privileged as well, so it should not be that
harmful.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-05-03 19:48:58 +02:00
Manuel Buil 352b66abee
Merge pull request #76 from manuelbuil/calico 
Add the calicoctl and operator images
 2021-04-30 20:43:18 +02:00
Manuel Buil fa98b97a33 Add the calicoctl and operator images 
Consume the images from our rancher/mirrored-xxx images

Unfortunately, we can't consume the rest of the images. This feature is
unavailable

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-30 20:12:31 +02:00
Manuel Buil 515320182b
Merge pull request #74 from manuelbuil/calico 
Add Calico helm chart
 2021-04-30 10:55:45 +02:00
Manuel Buil 97e2c7dd55
Merge pull request #70 from mrostecki/cilium-1.9.6 
cilium: Update to 1.9.6
 2021-04-29 16:37:22 +02:00
Jaime Caamaño Ruiz b67bef6057 Add multus & sr-iov charts 
Adds charts for sriov and multus.

Details:

* Multus chart, on deployment installs number of cnis, not only multus
  itself but also other cnis ussually combined with it, like host-device
  and macvlan.
* Multus includes a CRD, NetworkAttachmentDefinition, which is the
  means to attach interfaces to pods by specifying a delegated cni for
  each.
* Multus replaces the existing cni with itself, and sets up a default
  NetworkAttachmentDefinition with that existing cni that will setup the
  first interface of the pod just as if multus was not there.
* The NetworkAttachmentDefinition CRD is included along other multus
  templates in the chart and no specific chart is setup for the CRD.
  This CRD is no consumed on deployment and is unlikely to change
  frequently.
* Sriov depends on NetworkAttachmentDefinition CRD but no dependency is
  set between Multus and Sriov. Sriov charts checks on the presence of
  NetworkAttachmentDefinition CRD via capabilities and fails deployment
  if unavailable.
* Sriov includes a number of CRDs which are setup as separate chart.
* Sriov operator depends on certificates to be able to deploy its
  webhooks. The charts depends and checks for the presence of
  cert-manager to generate these certificates. Optionally, via chart
  value, cert-manager integration can be disabled in which case the
  chart will generate certificates with 1 year validity as a means to
  quickly test or trial, but not the intended setup for production
  clusters.

Signed-off-by: Jaime Caamaño Ruiz <jcaamano@suse.com>
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-29 16:05:55 +02:00
Manuel Buil d8ad84be5a Add Calico helm chart 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-29 16:00:13 +02:00
Jonas Falck 22324fa3fc Add ability to configure calico failsafe ports 
Made FailsafeOutboundHostPorts and FailsafeInboundHostPorts configurable
to allow users to have custom network policy for example SSH (22)

Previously failsafe rules would always have opened 22 even if user had
custom GlobalNetworkPolicy applied on the node.

Fixes https://github.com/rancher/rke2/issues/921
 2021-04-28 17:14:54 -07:00
Brad Davidson 1b4dda478d
Update coredns and kube-proxy charts to use passthrough values (#73) 
* Update coredns and kube-proxy charts to use passthrough values
* bump kube-proxy versions back to v1.21.0

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-04-27 15:58:35 -07:00
Michal Rostecki fe4f204537 cilium: generated-changes: Regenerate patches after update to 1.9.6 
This change contains only autoregenerated patches after the update of
Cilium to 1.9.6. Those patches had to be regenerated due to upstream
changes in Cilium Helm charts.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-04-26 18:16:21 +01:00
Michal Rostecki e2952f85f1 cilium: Update to 1.9.6 
This change updates the Cilium version from 1.9.4 to 1.9.6. This release
updates Envoy to 1.17.2 to address CVE-2021-28682, CVE-2021-28683 and
CVE-2021-29258.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-04-26 18:13:55 +01:00
Manuel Buil d666fe9746 Change the default ipam mode of cilium 
Cilium's default ipam mode does not honor the pod CIDR set in kube-controller-manager.
The benefits of that mode are not relevant when deploying with rke2

Fixes issue rke2/891

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-19 20:12:55 +02:00
Chris Kim 37bf4a2df3 Change rke2-kube-proxy to v1.20.6-build20210419 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-04-19 10:08:39 -07:00
Chris Kim 0dc3240167 Change rke2-kube-proxy to v1.18.18-build20210419 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-04-19 10:04:13 -07:00
Chris Kim 5a3e8ffe34 Change rke2-kube-proxy to v1.18.18 
Signed-off-by: Chris Kim <oats87g@gmail.com>
 2021-04-19 09:54:27 -07:00
Brian Downs f75d23a263 update kube-proxy to v1.21.0 
Signed-off-by: Brian Downs <brian.downs@gmail.com>
 2021-04-13 10:46:59 -07:00
Manuel Buil b7d773f99a Allow users to deploy Cilium with dual stack config 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-09 10:32:28 +02:00
David Nuzik cef1dde9fd
Merge pull request #46 from jcaamano/main-source 
Add cilium chart
 2021-04-08 07:58:42 -07:00
Brad Davidson 87e567bead update kube-proxy version to v1.20.5-build20210405 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-04-06 10:17:30 -07:00