10 Commits (51f1a5a0ab2299de1f554a1e83dbe1366974f5cf)

Author	SHA1	Message	Date
Brad Davidson	aa76942d0f	Add FilterCN function to prevent SAN Stuffing ... Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	1 year ago
Yuxing Deng	b64a226ebd	Make LB image configurable when compiling k3s ... It is no way we can configure the lb image because it is a const value. It would be better that we make it variable value and we can override the value like the `helm-controller` job image when compiling k3s/rke2 Signed-off-by: Yuxing Deng <jxfa0043379@hotmail.com>	2 years ago
Brad Davidson	93279d2f59	Bump klipper-lb to v0.4.4 ... Fixes issue with localhost access to ServiceLB when ExternalTrafficPolicy=Local Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Hussein Galal	30638072c9	Update klipper lb to v0.4.2 (#7210) ... * Update klipper lb to v0.4.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update klipper lb to v0.4.3 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update klipper lb to v0.4.3 in airgap list Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	2 years ago
Brad Davidson	cc333d8d0c	Fix ServiceLB dual-stack ingress IP listing ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	c6d0afd0cb	Check for existing resources before creating them ... Prevents errors when starting with fail-closed webhooks Also, use panic instead of Fatalf so that the CloudControllerManager rescue can handle the error Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	369b81b45e	Honor Service ExternalTrafficPolicy ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	a07bb555ba	Bump klipper-helm and klipper-lb versions ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f25419ca2c	Add ServiceAccount for svclb pods ... For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0b96ca92bc	Move servicelb into cloudprovider LoadBalancer interface ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago