andata
/
rke2-charts
mirror of https://git.rancher.io/rke2-charts
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
633 Commits
4 Branches
0 Tags
40 MiB
Commit Graph

46 Commits (cdc6669a3ca421935cea2d45fbd8ff816af7db73)

Author SHA1 Message Date
Michael Fritch c719ab4df1 Update Cilium to v1.15.1 
Issue: https://github.com/rancher/rke2/issues/5472
Signed-off-by: Michael Fritch <mfritch@suse.com>
 2024-02-15 14:27:34 -08:00
Michael Fritch bd6faf3b91
Update to Cilium v1.15.0 
Issue: https://github.com/rancher/rke2/issues/5354
Signed-off-by: Michael Fritch <mfritch@suse.com>
 2024-02-07 19:14:06 -07:00
Michael Fritch d1b368f898
Explicitly disable cilium node taints 
Disables usage of the `node.cilium.io/agent-not-ready` taint

Issue: https://github.com/rancher/rke2/issues/5333
Signed-off-by: Michael Fritch <mfritch@suse.com>
 2024-01-29 16:23:07 -07:00
Michael Fritch e4e661d7b6
Update Cilium to 1.14.5 
Also provides an update for:
- hardened-cni-plugins 1.4.0-build20240122
- cilium-envoy v1.26.6-ad82c7c56e88989992fd25d8d67747de865c823b

Signed-off-by: Michael Fritch <mfritch@suse.com>
 2024-01-29 15:15:41 -07:00
Thomas Ferrandiz 759bf5b6a4 update cilium to v1.14.4 2023-11-17 10:50:36 +00:00
Thomas Ferrandiz 8a898d1788 update hardened-cni-plugins to v1.2.0-build20231009 2023-10-24 11:56:45 +00:00
Derek Nola b7d6d7af66
Update cilium to 1.14.2 (#374) 
Signed-off-by: Derek Nola <derek.nola@suse.com>
 2023-10-02 09:23:33 -07:00
Roberto Bonafiglia 4b8427f0bf Update Cilium to v1.14.1 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-09-13 13:30:40 +02:00
Roberto Bonafiglia 97bdb7eb6e Update cilium to v1.14.0 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-08-04 09:30:48 +02:00
Roberto Bonafiglia 16403a158a Update calico to v3.26.1 and Cilium to v1.13.4 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-07-07 09:32:11 +02:00
Roberto Bonafiglia 30474a81db Update cilium to v1.13.2 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-05-03 10:45:16 +02:00
Roberto Bonafiglia 0303ac3541 Update Cilium to v1.13.0 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2023-03-13 21:19:46 +01:00
Paulo Gomes 4edd40e37c Bump Cilium to v1.12.5 and Hubble to v0.10.0 
Signed-off-by: Paulo Gomes <paulo.gomes@suse.com>
 2023-01-20 10:29:34 +01:00
Roberto Bonafiglia e80d9cb905 Fixed cilium images chart string 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-12-12 22:03:21 +01:00
Roberto Bonafiglia e6721cb1a7 Update Cilium version and added new images 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-12-02 17:56:43 +01:00
Manuel Buil c0c6ad8c4c Treat portmap plugin as the rest of images 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-11-13 15:28:22 +01:00
Manuel Buil f405afc444 Add portmap support and update cilium to 1.12.3 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-10-28 12:51:44 +02:00
Roberto Bonafiglia f940d95105 Added system_default_registry on cilium 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-10-20 12:37:12 +02:00
Dan 7f62087ea0
increment package version 2022-08-31 12:04:20 -04:00
Dan 317f4c59ad
Correct cilinium preflight charts 
This changes the cilium preflight image format to match the one we use when consuming the image.
 2022-08-31 11:58:36 -04:00
Manuel Buil 6e62c2be06 Update Cilium and remove the node-init daemonSet 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-08-17 17:56:11 +02:00
Roberto Bonafiglia 576a0d9e5a Updated cilium to 1.12.0 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-07-26 17:24:27 +02:00
Roberto Bonafiglia da84464275 Updated cilium chart to support IPv6 only config 
Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>
 2022-06-16 17:12:29 +02:00
Manuel Buil 2a79081adc Update to cilium 1.11.5 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-24 10:07:43 +02:00
Manuel Buil e79aa5c225 Update Cilium to 1.11.4 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-05-06 10:32:57 +02:00
Manuel Buil f525894f98 Fix Cilium typo 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-04-11 15:54:46 +02:00
Manuel Buil 1420c033d1 Add automatic support for dual-stack 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-04-11 12:07:40 +02:00
Manuel Buil 8ae028906a Update Cilium to 1.11.2 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-03-15 10:31:36 +01:00
Manuel Buil c1de89a662 Change Cilium to consume all variables 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2022-03-14 17:14:12 +01:00
Michal Rostecki 83ed370956 cilium: Update to 1.11.1 
https://github.com/cilium/cilium/releases/tag/v1.11.1

Ref: rancher/rke2#2242
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-20 12:14:17 +01:00
Michal Rostecki e740d3623e cilium: Remove values.schema.json 
That file doesn't seem to be used anywhere.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-20 12:14:17 +01:00
Michal Rostecki a4535f12ca Update Cilium to 1.11.0 
Update Cilium from 1.10.4 to 1.11.0.

https://github.com/cilium/cilium/releases/tag/v1.11.0

Ref: rancher/rke2#2242
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2022-01-18 19:11:56 +01:00
Michal Rostecki 924c5478e3 cilium: Fix image URI of mount-cgroup init container 
It was missing the system_default_registry tag.

Ref: #1894
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-10-07 12:42:20 +02:00
Michal Rostecki f83c330d57 rke2-cilium: Disable image digest usage 
Upstream Cilium helm chart looks for the specific image digest for a
given release. Since we use different mirrored images, we need to
disable that check on our side.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-10-06 16:35:52 -07:00
Michal Rostecki 7be6855132 cilium: Fix the eni value 
The upstream Cilium chart changed the type of `eni` value to a nested
object. Adjust our rke2-cilium chart to that change.

Ref: rancher/rke2#1615

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-09-13 09:44:44 +02:00
Michal Rostecki 3f615ba055 cilium: Update to 1.10.4 
Update Cilium from 1.9.8 to 1.10.4. Changelog:

https://github.com/cilium/cilium/releases/tag/v1.10.4

Ref: rancher/rke2#1615

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-09-06 14:58:35 +02:00
Brad Davidson 550851f5b4 add linux nodeSelectors to charts 
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
 2021-08-19 11:29:56 -07:00
Michal Rostecki 81286de9e5 cilium: Update to 1.9.8 
Update Cilium from 1.9.6 to 1.9.8. Changelogs of the last two releases:

* https://github.com/cilium/cilium/releases/tag/v1.9.8
* https://github.com/cilium/cilium/releases/tag/v1.9.7

Ref: rancher/rke2#1099
Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-06-07 18:59:31 +02:00
Hussein Galal 12275df431
Add tolerations to network plugins and coredns (#98) 
* Add toleration for calico

* Add coredns tolerations

* Add multus tolerations

* Add sriov tolerations

* Add cilium tolerations

* fix sriov

* Fix coredns
 2021-05-27 21:12:25 +02:00
Manuel Buil 5bd07b7b31 Revert "Fix bug when deploying with Cilium" 
This reverts commit 730b1f6398.
 2021-05-20 20:46:28 +02:00
Manuel Buil 730b1f6398 Fix bug when deploying with Cilium 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-05-19 17:07:04 +02:00
Michal Rostecki 7b841da6e9 cilium: Make the wait-for-note-init container privileged 
Before this change, wait-for-node-init container was not able to execute
properly with SELinux enabled, due to lack of ability to access the bind
mounted file. Due to lack of ability to set the container_file_t label
through Kubernetes, the other possible solution, done in this commit, is
making the container privileged. All the other containers accessing the
bootstrap file are already privileged as well, so it should not be that
harmful.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-05-03 19:48:58 +02:00
Michal Rostecki e2952f85f1 cilium: Update to 1.9.6 
This change updates the Cilium version from 1.9.4 to 1.9.6. This release
updates Envoy to 1.17.2 to address CVE-2021-28682, CVE-2021-28683 and
CVE-2021-29258.

Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
 2021-04-26 18:13:55 +01:00
Manuel Buil d666fe9746 Change the default ipam mode of cilium 
Cilium's default ipam mode does not honor the pod CIDR set in kube-controller-manager.
The benefits of that mode are not relevant when deploying with rke2

Fixes issue rke2/891

Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-19 20:12:55 +02:00
Manuel Buil b7d773f99a Allow users to deploy Cilium with dual stack config 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-04-09 10:32:28 +02:00
Jaime Caamaño Ruiz 3d1dedcf2b Add cilium chart 
The chart is organized in subcharts to clearly delimit supported vs
non-supported customization options, as follows:

- The main rke2-cilium chart which only supplies supported customization
  options through its values.yaml.
- Cilium upstream chart is pulled in as a subchart dependency and is
  patched to support a system default registry as a global variable.
- A rke2-cilium-hard-defaults subchart which supplies cilium options
  that change from upstream defaults for which we don't intend to
  support any customization.

All cilium options are scoped & accessible, for example:
`helm install rke2-cilium --set cilium.preflight.enabled=true`

Signed-off-by: Jaime Caamaño Ruiz <jcaamano@suse.com>
 2021-04-06 12:55:27 +02:00