17 Commits (86875c97bb1b9dd35e51e774bc9f226ccccec4e1)

Author	SHA1	Message	Date
Brad Davidson	37f97b33c9	Add support for svclb pod PriorityClassName ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	6 months ago
Brad Davidson	095ecdb034	Fix issue with local traffic policy for single-stack services on dual-stack nodes. ... Just enable IP forwarding for all address families regardless of service address families. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	6 months ago
Hussein Galal	144f5ad333	Kubernetes V1.30.0-k3s1 (#10063) ... * kubernetes 1.30.0-k3s1 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update go version to v1.22.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update dynamiclistener and helm-controller Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update go in go.mod to 1.22.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update go in Dockerfiles Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update cri-dockerd Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Add proctitle package with linux and windows constraints Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * go mod tidy Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Fixing setproctitle function Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update dynamiclistener to v0.6.0-rc1 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	7 months ago
Derek Nola	14f54d0b26	Transition from deprecated pointer library to ptr (#9801) ... Signed-off-by: Derek Nola <derek.nola@suse.com>	8 months ago
Manuel Buil	3b4f13f28d	Update klipper-lb image version ... Signed-off-by: Manuel Buil <mbuil@suse.com>	9 months ago
Brad Davidson	a27d660a24	Add ServiceLB support for PodHostIPs FeatureGate ... If the feature-gate is enabled, use status.hostIPs for dual-stack externalTrafficPolicy=Local support Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	11 months ago
Jason Costello	07ee854914	Tweaked order of ingress IPs in ServiceLB (#8711) ... * Tweaked order of ingress IPs in ServiceLB Previously, ingress IPs were only string-sorted when returned Sorted by IP family and string-sorted in each family as part of filterByIPFamily method * Update pkg/cloudprovider/servicelb.go * Formatting Signed-off-by: Jason Costello <jason@hazy.com> Co-authored-by: Brad Davidson <brad@oatmail.org>	1 year ago
Brad Davidson	aa76942d0f	Add FilterCN function to prevent SAN Stuffing ... Wire up a node watch to collect addresses of server nodes, to prevent adding unauthorized SANs to the dynamiclistener cert. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	1 year ago
Yuxing Deng	b64a226ebd	Make LB image configurable when compiling k3s ... It is no way we can configure the lb image because it is a const value. It would be better that we make it variable value and we can override the value like the `helm-controller` job image when compiling k3s/rke2 Signed-off-by: Yuxing Deng <jxfa0043379@hotmail.com>	2 years ago
Brad Davidson	93279d2f59	Bump klipper-lb to v0.4.4 ... Fixes issue with localhost access to ServiceLB when ExternalTrafficPolicy=Local Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Hussein Galal	30638072c9	Update klipper lb to v0.4.2 (#7210) ... * Update klipper lb to v0.4.2 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update klipper lb to v0.4.3 Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Update klipper lb to v0.4.3 in airgap list Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>	2 years ago
Brad Davidson	cc333d8d0c	Fix ServiceLB dual-stack ingress IP listing ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	c6d0afd0cb	Check for existing resources before creating them ... Prevents errors when starting with fail-closed webhooks Also, use panic instead of Fatalf so that the CloudControllerManager rescue can handle the error Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	369b81b45e	Honor Service ExternalTrafficPolicy ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	a07bb555ba	Bump klipper-helm and klipper-lb versions ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	f25419ca2c	Add ServiceAccount for svclb pods ... For 1.24 and earlier, the svclb pods need a ServiceAccount so that we can allow their sysctls in PSPs Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Brad Davidson	0b96ca92bc	Move servicelb into cloudprovider LoadBalancer interface ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago