Dan Williams
95be5da5e2
firewall: add a couple more testcases
2019-04-12 14:37:21 -04:00
Dan Williams
b46e1a0138
firewall: consolidate firewalld code into firewall plugin
2019-04-12 14:37:21 -04:00
Michal Rostecki
9d6f1e9975
firewall: add firewalld functionality to firewall plugin
...
Example of usage, which uses flannel for allocating IP
addresses for containers and then registers them in `trusted`
zone in firewalld:
{
"cniVersion": "0.3.1",
"name": "flannel-firewalld",
"plugins": [
{
"name": "cbr0",
"type": "flannel",
"delegate": {
"isDefaultGateway": true
}
},
{
"type": "firewall",
"backend": "firewalld",
"zone": "trusted"
}
]
}
Fixes #114
Signed-off-by: Alban Crequy <alban@kinvolk.io>
Signed-off-by: Michal Rostecki <mrostecki@suse.com>
2019-04-12 14:37:21 -04:00
Michal Rostecki
eb66fc201c
vendor: Add github.com/godbus/dbus
...
Signed-off-by: Michal Rostecki <mrostecki@suse.com>
2019-04-12 14:37:21 -04:00
Dan Williams
d096a4df48
firewall: new plugin which allows a host interface to send/receive traffic
...
Distros often have additional rules in the their iptabvles 'filter' table
that do things like:
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
docker, for example, gets around this by adding explicit rules to the filter
table's FORWARD chain to allow traffic from the docker0 interface. Do that
for a given host interface too, as a chained plugin.
2019-04-12 14:37:21 -04:00
Dan Williams
e9e1d37309
Merge pull request #231 from SchSeba/add-vlan-tag-to-bridge
...
Added vlan tag to the bridge cni plugin.
2019-04-11 11:58:33 -05:00
Sebastian Sch
b69a2dd3d7
Added vlan tag to the bridge cni plugin.
...
With the VLAN filter, the Linux bridge acts more like a real switch, Allow to tag and untag
vlan id's on every interface connected to the bridge.
This PR also creates a veth interface for the bridge vlan interface on L3 configuration.
Related to https://developers.redhat.com/blog/2017/09/14/vlan-filter-support-on-bridge/ post.
Note: This feature was introduced in Linux kernel 3.8 and was added to RHEL in version 7.0.
2019-04-10 21:59:52 +03:00
Bryan Boreham
0d6198bac4
Merge pull request #292 from squeed/cni-07
...
vendor: bump libcni to v0.7.0-rc2
2019-04-10 16:50:25 +01:00
Michael Cambria
914f2bc740
set CGO_ENABLED=0 in travis.yml
2019-04-10 17:24:42 +02:00
Casey Callendrello
e028b70b49
vendor: bump libcni to v0.7.0-rc2
2019-04-10 17:16:27 +02:00
Casey Callendrello
fbd9accd14
Merge pull request #268 from s1061123/fix/dhcp_daemon_hostprefix
...
Fix -hostprefix option
2019-04-08 12:53:09 +02:00
Tomofumi Hayashi
8b53f80fa8
Incorporate with @bboreham comment
2019-04-05 03:38:20 +09:00
Sebastian Sch
dc536993e2
vendor folder bump.
2019-04-04 16:39:05 +03:00
Dan Williams
18874aac7d
Merge pull request #264 from mccv1r0/add-check
...
Add CHECK support for linux plugins
2019-04-03 12:58:41 -05:00
Michael Cambria
74a2596573
Add check support for: bridge, ipvlan, macvlan, p2p, vlan and host-device main plugins
...
host-local and static ipam plugins
tuning, bandwidth and portmap meta plugins
Utility functions created for common PrevResult checking
Fix windows build
2019-04-03 13:08:07 -04:00
Dan Williams
8a3d149a60
Merge pull request #284 from francares/fmc_dhcp_subnetmask
...
IPAM/DHCP: include Subnet Mask option parameter in DHCPREQUEST
2019-04-01 14:56:13 -05:00
Dan Williams
9c9a8e991d
Merge pull request #271 from nagiesek/dnsRuntimeConfigWindows
...
Windows: Add runtime DNS and del bug fix
2019-03-27 10:58:05 -05:00
Dan Williams
f55d8d02ce
Merge pull request #276 from s1061123/dev/add-dhcp-systemd-file
...
Add systemd unit file to activate socket with systemd
2019-03-27 09:23:15 -05:00
Casares, Francisco M
d577d9cc24
DHCP: include Subnet Mask option parameter in DHCPREQUEST
...
DHCP REQUEST from DHCP plugin does not include Subnet Mask option parameter (1). Some DHCP servers need that option to be explicit in order to return it in a DHCPACK message.
If not, DHCP plugin returns "DHCP option Subnet Mask not found in DHCPACK" error msg in this type of scenario.
2019-03-26 12:49:48 -07:00
Tomofumi Hayashi
4ec62ac295
Fix -hostprefix option
...
Fix #267
2019-03-26 18:27:46 +09:00
Dan Williams
82a0651d0a
Merge pull request #278 from dcbw/portmap-prepend
...
Portmap: append, rather than prepend, entry rules
2019-03-20 10:21:01 -05:00
Casey Callendrello
9fab520c37
Portmap: append, rather than prepend, entry rules
...
This means that portmapped connections can be more easily controlled /
firewalled.
2019-03-18 14:03:13 -05:00
Tomofumi Hayashi
b1814d7f9a
Add systemd unit file to activate socket with systemd
...
This changes to add sample systemd unit files to activate socket
with systemd. Fix #156 .
2019-03-14 16:03:23 +09:00
Nathan Gieseker
b71e8db683
Windows: Add runtime DNS and del bug fix
...
This adds the dns capability for supplying a runtime dnsConfig from a CRI. It also includes a bug fix for removing an endpoint when no IPAM is supplied. Adds version dependency of 0.3.0. Mild updates to windows READMEs.
2019-03-12 20:56:11 -07:00
Dan Williams
afd7391938
Merge pull request #266 from huynq0911/fix_redundant_import_alias
...
Fix redundant import alias
2019-02-27 14:12:22 -06:00
Dan Williams
a95d48bb01
Merge pull request #215 from nagiesek/addHcnSupport
...
Windows: Adds support for Host Compute Calls for Win-Bridge
2019-02-27 14:11:45 -06:00
Nathan Gieseker
57b42a7b99
Windows: Adds HCS Calls and Bug Fixes
...
Move the windows plugin to use the Host Compute (v2) APIs, as well
as clean-up the code. Allows win-bridge to use either the old API or Host Compute (v2) api
depending on a conf parameter. Fixes a leaked endpoint issue on windows for the v1 flow, and
removes the hns/pkg from the linux test run.
2019-02-27 08:49:34 -08:00
Nguyen Quang Huy
4bca3e76bf
Fix redundant import alias
...
Because these package names are short and they are unique, it can not conflict. So the import aliases that can be omitted and we should remove them.
2019-02-20 16:58:45 +07:00
Dan Williams
1865a0701e
Merge pull request #212 from plwhite/sbrplugin
...
Create new Source Based Routing plugin
2019-02-06 10:15:56 -06:00
Peter White
29928cff4d
Create new Source Based Routing plugin
...
This creates a new plugin (sbr) which sets up source based routing, for use
as a chained plugin for multi-network environments.
2019-01-31 09:27:59 +00:00
Dan Williams
c74e0e9967
Merge pull request #255 from saravanakumar-periyasamy/master
...
some DHCP servers expect to request for explicit router options
2019-01-30 10:07:20 -06:00
Dan Williams
9226c9642d
Merge pull request #254 from daschott/master
...
Added CONTRIBUTORS.md for Windows and CNI plugins OWNERS.md
2019-01-30 10:06:50 -06:00
Dan Williams
fd71dae5a7
Merge pull request #256 from s1061123/fix/host-device-readme
...
Fix host-device README.md
2019-01-30 10:06:01 -06:00
Tomofumi Hayashi
d29d56bc4d
Fix host-device README.md
...
host-device's README.md missing 'type' field, so this change
just adds 'type' in config example.
2019-01-30 01:51:57 +09:00
Saravana Periyasamy
f891fd9e9a
some DHCP servers expect to request for explicit router options
2019-01-28 19:44:53 -06:00
David Schott
a5378f2ccf
added CONTRIBUTORS.md for Windows and CNI plugins OWNERS.md
2019-01-25 13:25:56 -08:00
Nathan Gieseker
9a429d8d25
Windows: Updates Windows Vendoring
...
Updates windows dependent libraries for vendoing.
2019-01-23 18:43:18 -08:00
Dan Williams
a686cc4bd8
Merge pull request #248 from JoeWrightss/patch-1
...
Fix some spelling errors
2019-01-09 09:50:38 -06:00
JoeWrightss
f5c451f719
remove changing
...
Signed-off-by: JoeWrightss <zhoulin.xie@daocloud.io>
2019-01-04 01:14:56 +08:00
JoeWrightss
f0208611ad
Fix some spelling errors
...
Signed-off-by: JoeWrightss <zhoulin.xie@daocloud.io>
2018-12-29 21:26:28 +08:00
Dan Williams
ee819c71a1
Merge pull request #246 from pivotal-k8s/windows-travis
...
Move Windows tests to Travis
2018-12-19 10:38:24 -06:00
Casey Callendrello
4371665606
Merge pull request #236 from BSWANG/master
...
remove gateway check
2018-12-12 18:41:02 +01:00
Gabe Rosenhouse
d0a28ce5f7
Merge pull request #239 from sufuf3/fix-typo
...
Fix typo from userful to useful in README
2018-12-12 08:14:24 -08:00
Ben Moss
34b1b702dc
Move Windows tests to Travis
2018-12-10 14:43:32 -08:00
sufuf3
35451e67e2
Fix typo from userful to useful in README
2018-12-03 14:35:19 +08:00
bingshen.wbs
59a746bd52
remove gateway check
...
Signed-off-by: bingshen.wbs <bingshen.wbs@alibaba-inc.com>
2018-11-29 12:59:38 +08:00
Gabe Rosenhouse
3fb464786f
Merge pull request #195 from SchSeba/l2-bridge
...
L2 bridge Implementation
2018-11-21 08:41:24 -08:00
Dan Williams
72251a67b5
Merge pull request #217 from mccv1r0/dhcpif
...
Add container ifName to the dhcp clientID, making the clientID value
2018-11-21 10:34:10 -06:00
Dan Williams
b75d14ab84
Merge pull request #234 from plwhite/vagrant
...
Tweak contributing instructions to clarify how to run tests.
2018-11-21 10:22:16 -06:00
Sebastian Sch
bf47e9aa1b
Allow L2 connection for the bridge cni plugin.
2018-11-21 17:57:10 +02:00