Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add EgressGroup API and Controller #1965

Merged
merged 1 commit into from
Apr 6, 2021
Merged

Add EgressGroup API and Controller #1965

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 33 additions & 3 deletions build/yamls/antrea-aks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1891,6 +1891,14 @@ rules:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.io
resources:
- egressgroups
verbs:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.tanzu.vmware.com
- controlplane.antrea.io
Expand Down Expand Up @@ -1952,6 +1960,14 @@ rules:
- patch
- create
- delete
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
Expand Down Expand Up @@ -2143,6 +2159,14 @@ rules:
- clustergroups/status
verbs:
- update
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
- apiGroups:
- clusterinformation.antrea.tanzu.vmware.com
resources:
Expand Down Expand Up @@ -2303,6 +2327,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# Name of the OpenVSwitch bridge antrea-agent will create and use.
# Make sure it doesn't conflict with your existing OpenVSwitch bridges.
#ovsBridge: br-int
Expand Down Expand Up @@ -2451,6 +2478,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# The port for the antrea-controller APIServer to serve on.
# Note that if it's set to another value, the `containerPort` of the `api` port of the
# `antrea-controller` container must be set to the same value.
Expand Down Expand Up @@ -2495,7 +2525,7 @@ metadata:
annotations: {}
labels:
app: antrea
name: antrea-config-t45hm85989
name: antrea-config-bm46tm9f88
namespace: kube-system
---
apiVersion: v1
Expand Down Expand Up @@ -2615,7 +2645,7 @@ spec:
key: node-role.kubernetes.io/master
volumes:
- configMap:
name: antrea-config-t45hm85989
name: antrea-config-bm46tm9f88
name: antrea-config
- name: antrea-controller-tls
secret:
Expand Down Expand Up @@ -2924,7 +2954,7 @@ spec:
operator: Exists
volumes:
- configMap:
name: antrea-config-t45hm85989
name: antrea-config-bm46tm9f88
name: antrea-config
- hostPath:
path: /etc/cni/net.d
Expand Down
36 changes: 33 additions & 3 deletions build/yamls/antrea-eks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1891,6 +1891,14 @@ rules:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.io
resources:
- egressgroups
verbs:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.tanzu.vmware.com
- controlplane.antrea.io
Expand Down Expand Up @@ -1952,6 +1960,14 @@ rules:
- patch
- create
- delete
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
Expand Down Expand Up @@ -2143,6 +2159,14 @@ rules:
- clustergroups/status
verbs:
- update
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
- apiGroups:
- clusterinformation.antrea.tanzu.vmware.com
resources:
Expand Down Expand Up @@ -2303,6 +2327,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# Name of the OpenVSwitch bridge antrea-agent will create and use.
# Make sure it doesn't conflict with your existing OpenVSwitch bridges.
#ovsBridge: br-int
Expand Down Expand Up @@ -2451,6 +2478,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# The port for the antrea-controller APIServer to serve on.
# Note that if it's set to another value, the `containerPort` of the `api` port of the
# `antrea-controller` container must be set to the same value.
Expand Down Expand Up @@ -2495,7 +2525,7 @@ metadata:
annotations: {}
labels:
app: antrea
name: antrea-config-t45hm85989
name: antrea-config-bm46tm9f88
namespace: kube-system
---
apiVersion: v1
Expand Down Expand Up @@ -2615,7 +2645,7 @@ spec:
key: node-role.kubernetes.io/master
volumes:
- configMap:
name: antrea-config-t45hm85989
name: antrea-config-bm46tm9f88
name: antrea-config
- name: antrea-controller-tls
secret:
Expand Down Expand Up @@ -2926,7 +2956,7 @@ spec:
operator: Exists
volumes:
- configMap:
name: antrea-config-t45hm85989
name: antrea-config-bm46tm9f88
name: antrea-config
- hostPath:
path: /etc/cni/net.d
Expand Down
36 changes: 33 additions & 3 deletions build/yamls/antrea-gke.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1891,6 +1891,14 @@ rules:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.io
resources:
- egressgroups
verbs:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.tanzu.vmware.com
- controlplane.antrea.io
Expand Down Expand Up @@ -1952,6 +1960,14 @@ rules:
- patch
- create
- delete
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
Expand Down Expand Up @@ -2143,6 +2159,14 @@ rules:
- clustergroups/status
verbs:
- update
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
- apiGroups:
- clusterinformation.antrea.tanzu.vmware.com
resources:
Expand Down Expand Up @@ -2303,6 +2327,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# Name of the OpenVSwitch bridge antrea-agent will create and use.
# Make sure it doesn't conflict with your existing OpenVSwitch bridges.
#ovsBridge: br-int
Expand Down Expand Up @@ -2451,6 +2478,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# The port for the antrea-controller APIServer to serve on.
# Note that if it's set to another value, the `containerPort` of the `api` port of the
# `antrea-controller` container must be set to the same value.
Expand Down Expand Up @@ -2495,7 +2525,7 @@ metadata:
annotations: {}
labels:
app: antrea
name: antrea-config-c2c88t7544
name: antrea-config-5c954cd56b
namespace: kube-system
---
apiVersion: v1
Expand Down Expand Up @@ -2615,7 +2645,7 @@ spec:
key: node-role.kubernetes.io/master
volumes:
- configMap:
name: antrea-config-c2c88t7544
name: antrea-config-5c954cd56b
name: antrea-config
- name: antrea-controller-tls
secret:
Expand Down Expand Up @@ -2927,7 +2957,7 @@ spec:
path: /home/kubernetes/bin
name: host-cni-bin
- configMap:
name: antrea-config-c2c88t7544
name: antrea-config-5c954cd56b
name: antrea-config
- hostPath:
path: /etc/cni/net.d
Expand Down
36 changes: 33 additions & 3 deletions build/yamls/antrea-ipsec.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1891,6 +1891,14 @@ rules:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.io
resources:
- egressgroups
verbs:
- get
- watch
- list
- apiGroups:
- controlplane.antrea.tanzu.vmware.com
- controlplane.antrea.io
Expand Down Expand Up @@ -1952,6 +1960,14 @@ rules:
- patch
- create
- delete
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
Expand Down Expand Up @@ -2143,6 +2159,14 @@ rules:
- clustergroups/status
verbs:
- update
- apiGroups:
- crd.antrea.io
resources:
- egresses
verbs:
- get
- watch
- list
- apiGroups:
- clusterinformation.antrea.tanzu.vmware.com
resources:
Expand Down Expand Up @@ -2303,6 +2327,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# Name of the OpenVSwitch bridge antrea-agent will create and use.
# Make sure it doesn't conflict with your existing OpenVSwitch bridges.
#ovsBridge: br-int
Expand Down Expand Up @@ -2456,6 +2483,9 @@ data:
# Enable collecting and exposing NetworkPolicy statistics.
# NetworkPolicyStats: false

# Enable controlling SNAT IPs of Pod egress traffic.
# Egress: false

# The port for the antrea-controller APIServer to serve on.
# Note that if it's set to another value, the `containerPort` of the `api` port of the
# `antrea-controller` container must be set to the same value.
Expand Down Expand Up @@ -2500,7 +2530,7 @@ metadata:
annotations: {}
labels:
app: antrea
name: antrea-config-f9cht7228c
name: antrea-config-29788ckmb7
namespace: kube-system
---
apiVersion: v1
Expand Down Expand Up @@ -2629,7 +2659,7 @@ spec:
key: node-role.kubernetes.io/master
volumes:
- configMap:
name: antrea-config-f9cht7228c
name: antrea-config-29788ckmb7
name: antrea-config
- name: antrea-controller-tls
secret:
Expand Down Expand Up @@ -2973,7 +3003,7 @@ spec:
operator: Exists
volumes:
- configMap:
name: antrea-config-f9cht7228c
name: antrea-config-29788ckmb7
name: antrea-config
- hostPath:
path: /etc/cni/net.d
Expand Down
Loading