Commit Graph

470 Commits

Author SHA1 Message Date
Doug Smith
cef999f394
Merge pull request #223 from pliurh/doc
Add doc for specifying pod default cluster network
2019-01-07 11:19:13 -05:00
dougbtv
0d8296c54c [docs][minor] Typos and formatting for default network annotation docs 2019-01-07 11:18:08 -05:00
Tomofumi Hayashi
73f629b2fe Fixed document about '/' notation in text annotation. 2019-01-07 11:02:02 +09:00
Tomofumi Hayashi
e55832cae0 Merge branch 'master' of github.com:intel/multus-cni 2018-12-27 12:20:36 +09:00
Peng Liu
1558896125 Add doc for specifying pod default cluster network
Update according to dougbtv's comments
2018-12-20 11:48:16 +08:00
dougbtv
de4bed7a60 [feature] Adds a namespace isolation security feature 2018-12-20 06:43:59 +09:00
Tomofumi Hayashi
6e335441ab Merge branch 'master' of github.com:intel/multus-cni 2018-12-18 14:28:28 +09:00
Michal Rostecki
f157f424b5 k8sclient: Add missing error check
Before this change, error returned by `libcni.ConfFiles` was
silently ignored.

Signed-off-by: Michal Rostecki <mrostecki@suse.de>
2018-12-06 23:56:24 +09:00
dougbtv
e5e020f6a3 [dockerfile] Adds Dockerfile.rhel for OpenShift build 2018-12-06 16:16:26 +09:00
Tomofumi Hayashi
dd9355c3aa Fix go fmt issue. 2018-12-06 13:42:17 +09:00
Tomofumi Hayashi
a9b40c7841 Fix go vet issue. 2018-12-06 13:34:08 +09:00
Tomofumi Hayashi
6bf296f54d Change the namespace to 'kube-system' 2018-12-05 14:47:30 +09:00
Tomofumi Hayashi
e05de6260b clusterNetwork/defaultNetworks and namespace spec fixed
This fix is to add declaration about clusterNetwork/defaultNetwork
net-attach-def is in 'default' namesspace. In addition, this code
changes to skip defaultNetwork in case of 'kube-system' namespace
as well (#202).
2018-12-05 14:47:30 +09:00
Tomofumi Hayashi
887a9f42dd Fix Docker build issue around golang. 2018-12-04 18:20:22 +09:00
Michal Rostecki
4e3a5fe180 Add .gitignore file
Prevent tracking of binary outputs, GOPATH and test outputs.

Signed-off-by: Michal Rostecki <mrostecki@suse.de>
2018-12-03 16:50:21 +09:00
dougbtv
8d89700cac [bugfix] Delete all delegates instead of breaking out during deletion loop 2018-11-30 13:41:08 +00:00
Peng Liu
96217dd16e Change pod annotation name to 'v1.multus-cni.io/default-network' 2018-11-30 16:11:09 +09:00
Peng Liu
c3be74d7d6 Add more debug message 2018-11-30 16:11:09 +09:00
Peng Liu
555a734e21 Specify Pod default network in Annotations
Signed-off-by: Peng Liu <pliu@redhat.com>
2018-11-30 16:11:09 +09:00
Tomofumi Hayashi
4aa1d212f1 Add description how to use CRD in non-default namespaces 2018-11-30 00:31:39 +09:00
dougbtv
97a4996546 [docs] Updates to fix typos and extend information about CNI configurations generally per review 2018-11-30 00:31:39 +09:00
dougbtv
10abd05b1e [docs] Adds additional quickstart.md specific guide, some updates to usage guide 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
85293b3305 Add comments in case of daemonset. 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
be1be19f11 Add more paragraph. 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
3723fc3b53 Add "NOTE:" and change "NOTE" from "Note" 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
4a4b9d6ebd s/folloiwng/following/ 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
426e9b2581 Add 'skip in case of daemonset' at "SA, ClusterRole..." 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
b13b3c9e65 Indent the paragraph at "install multus" 2018-11-30 00:31:39 +09:00
Tomofumi Hayashi
1a78cb5766 Update README.md and split into several child documents
Fix #154 and #139. Thank you @dougbtv for reviewing the docs!
2018-11-30 00:31:39 +09:00
Alona Kaplan
f4068d18bd Support IPRequest to specify IP address for interface 2018-11-30 00:16:11 +09:00
Tomofumi Hayashi
d1c8a3d93f Fix the log message. 2018-11-29 15:11:33 +09:00
Doug Smith
6ffd60d289
Merge pull request #194 from intel/travis-ci
Travis
2018-11-19 11:35:58 -05:00
dougbtv
eb0eaf5099 [travis] Updates Travis to build ':snapshot' tagged image on each merge into master 2018-11-19 11:31:54 -05:00
Doug Smith
cbf737b917
Merge pull request #184 from s1061123/dev/issue_template
Add issue template for {bug,enhance,support}
2018-11-15 10:18:13 -05:00
Przemyslaw Lal
bf893189ef fix indentation
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
0903a11dc6 webhook documentation updates
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
de954a68dd add more webhook tests
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
b59a82d6fb improve error handling in webhook
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
d9e9e7b5dd run webhook as a deployment
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
82b3549c5d Add proxy env variables to docker build script
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
3f19f95fca Add documentation for validating admission webhook
Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
4471a16a9d Add deployment files for validating admission webhook
* Add script for automated certtificates and secret generation
* Add pod, service and webhook configuration specification files

Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Przemyslaw Lal
5aecd09331 Add validating admission webhook
* Add validating admission webhook HTTP server application
* Handle incoming AdmissionReview requests and validate their correctness, handle errors if any
* Validate Network Attachment Definition objects
* Send AdmissionReview response with allowed/denied decision and its reason
* In case of any other errors (malformed HTTP request, empty body, etc.) send proper HTTP error code
* Use TLS encryption
* Add some basic unit tests for Network Attachment Definition objects validation
* Build Docker image with webhook application

Signed-off-by: Przemyslaw Lal <przemyslawx.lal@intel.com>
2018-11-12 23:22:14 +00:00
Alona Kaplan
ec543570b5 Setting the MAC in CNI_ARGS shouldn't override the already existing CNI_ARGS 2018-11-12 17:13:37 +01:00
Dan Williams
5ef87bfd71 CRD: interfaceRequest -> interface (v1 spec conformance)
Change the Network Attachment Selection Annotation long-form
interface name request JSON key from 'interfaceRequest' to
'interface' to conform with the V1 NPWG spec.
2018-11-09 13:20:51 +09:00
Tomofumi Hayashi
9f00ea47f5 Fix rebase conflicts. 2018-11-09 00:15:35 +09:00
Tomofumi Hayashi
41348f2de1 Fix multus_test. 2018-11-09 00:15:35 +09:00
Tomofumi Hayashi
dccb303d6e Remove unnecessary else clause 2018-11-09 00:15:35 +09:00
Tomofumi Hayashi
f4f187d71d Incorporate @dcbw's comment. 2018-11-09 00:15:35 +09:00
Tomofumi Hayashi
60dfae14ea Add mac/interfaceRequest section in README.md 2018-11-09 00:15:35 +09:00