custom-ingress merge requestshttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests2024-03-27T13:31:36+01:00https://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/37Remove job for enabling IPv6 on LBaaS2024-03-27T13:31:36+01:00Jack Henscheljack.henschel@cern.chRemove job for enabling IPv6 on LBaaSremoves the workaround put in place in https://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/35
related to https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/1264removes the workaround put in place in https://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/35
related to https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/1264Jack Henscheljack.henschel@cern.chJack Henscheljack.henschel@cern.chhttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/36Draft: Added poddisruptionbudget2024-02-27T11:26:36+01:00Alberto PimpoDraft: Added poddisruptionbudgetAlberto PimpoAlberto Pimpohttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/35Lbaasv22024-03-27T11:19:45+01:00Alexandre LossentLbaasv2Add support for IPv6 with CERN LBaaSv2Add support for IPv6 with CERN LBaaSv2Alexandre LossentAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/34Draft: Added default-ingress partial manifest2023-09-28T15:59:41+02:00Alberto PimpoDraft: Added default-ingress partial manifestRelated to https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/1229Related to https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/1229Alberto PimpoAlberto Pimpohttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/33Separate publish-dns nodeSelector2022-11-21T18:27:02+01:00Alexandre LossentSeparate publish-dns nodeSelectorFor https://gitlab.cern.ch/paas-tools/okd4-install/-/merge_requests/1058
I had to decouple the nodeSelector for publish-dns from the ingress controller's nodeSelector so ICs can request scheduling on pods with firewall openings (which p...For https://gitlab.cern.ch/paas-tools/okd4-install/-/merge_requests/1058
I had to decouple the nodeSelector for publish-dns from the ingress controller's nodeSelector so ICs can request scheduling on pods with firewall openings (which publish-dns doesn't need)Jack Henscheljack.henschel@cern.chJack Henscheljack.henschel@cern.chhttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/32Remove hook to recreate IC2022-11-08T12:25:56+01:00Alexandre LossentRemove hook to recreate ICNot needed anymore as per
https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/1052#note_6133798Not needed anymore as per
https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/1052#note_6133798Dimitra Chatzichrysoudimitra.chatzichrysou@cern.chFrancisco Borges Aurindo BarrosDimitra Chatzichrysoudimitra.chatzichrysou@cern.chhttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/31Add switch for publishing IPv6 records for nodes2022-05-16T12:47:34+02:00Jack Henscheljack.henschel@cern.chAdd switch for publishing IPv6 records for nodesAlexandre LossentAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/30Update README and remove obsolete router-image2022-05-03T17:06:10+02:00Jack Henscheljack.henschel@cern.chUpdate README and remove obsolete router-imagehttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/29Add support for custom annotations on ingress controller2022-04-26T14:49:48+02:00Jack Henscheljack.henschel@cern.chAdd support for custom annotations on ingress controllerhttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/28Implement load balancer proxy protocol support2021-12-20T09:22:38+01:00Jack Henscheljack.henschel@cern.chImplement load balancer proxy protocol supportTo enable the PROXY protocol [1] of the CERN cloud loadbalancer, we
need to set a specific annotation on the Kubernetes Service resource. [2]
Unfortunately, this cannot be configured with the regular
IngressController spec.
Thus, we nee...To enable the PROXY protocol [1] of the CERN cloud loadbalancer, we
need to set a specific annotation on the Kubernetes Service resource. [2]
Unfortunately, this cannot be configured with the regular
IngressController spec.
Thus, we need to create an IngressController with the `Private`
endpointPublishingStategy, which will effectively provision a
Kubernetes Service of type "ClusterIP".
Then, we provision an additional Service of type "LoadBalancer"
ourselves, which has the appropriate annotation.
In general, this a probably a useful solution, since we have an easy path to add more annotation (as required) in the future.
* [1] https://www.haproxy.com/blog/haproxy/proxy-protocol/
* [2] https://github.com/kubernetes/cloud-provider-openstack/blob/e5e34df195f293c563a8f20b3ddf8a9b64b96456/docs/openstack-cloud-controller-manager/expose-applications-using-loadbalancer-type-service.md#use-proxy-protocol-to-preserve-client-ipAlexandre LossentAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/27Relax connection timeouts2021-12-07T17:28:54+01:00Alexandre LossentRelax connection timeoutsDue to slow clients like SVNDue to slow clients like SVNJack Henscheljack.henschel@cern.chJack Henscheljack.henschel@cern.chhttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/26Upgrade to OKD 4.82021-11-24T12:19:56+01:00Jack Henscheljack.henschel@cern.chUpgrade to OKD 4.8Prepare for upgrade to OKD 4.8
https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/567Prepare for upgrade to OKD 4.8
https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/567Alexandre LossentIsmael Posada TroboAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/25Update ingress-publish-dns image2021-11-04T13:36:19+01:00Jack Henscheljack.henschel@cern.chUpdate ingress-publish-dns imageInclude changes from https://gitlab.cern.ch/paas-tools/okd4-deployment/ingress-publish-dns/-/merge_requests/5
Required for https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/638Include changes from https://gitlab.cern.ch/paas-tools/okd4-deployment/ingress-publish-dns/-/merge_requests/5
Required for https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/638Alexandre LossentAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/24Remove haproxy-config.template2021-09-30T14:23:23+02:00Michal KolodziejskiRemove haproxy-config.templatecloses https://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/issues/1closes https://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/issues/1Alexandre LossentJoao Esteves MarcalAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/23Fix secret name reference2021-08-24T10:23:29+02:00Alexandre LossentFix secret name referenceBug found after deployment on webeos-protoBug found after deployment on webeos-protoMichal KolodziejskiMichal Kolodziejskihttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/22Reorganize Helm values for more flexibility2021-08-19T10:29:04+02:00Alexandre LossentReorganize Helm values for more flexibilitySo we can override any field of the ingress controller specSo we can override any field of the ingress controller specMichal KolodziejskiMichal Kolodziejskihttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/21Use secret for DNS TSIG keys2021-05-20T15:28:58+02:00Alexandre LossentUse secret for DNS TSIG keysSo the secret keys won't be exposed to cluster-reader
role (preparation for https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/245#note_4454513)
I used the same structure to pass the TSIG keys as cert-manager's Helm char...So the secret keys won't be exposed to cluster-reader
role (preparation for https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/245#note_4454513)
I used the same structure to pass the TSIG keys as cert-manager's Helm chart
Remove redundant `namespace` value for cert-manager certificateMichal KolodziejskiJoao Esteves MarcalMichal Kolodziejskihttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/20Fix liveness probe2021-04-23T12:22:45+02:00Michal KolodziejskiFix liveness probeAlexandre LossentJoao Esteves MarcalAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/19Add livenessProbe to publish-dns deployment2021-04-23T08:28:10+02:00Michal KolodziejskiAdd livenessProbe to publish-dns deploymentrelated to https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/354related to https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/354Alexandre LossentJoao Esteves MarcalAlexandre Lossenthttps://gitlab.cern.ch/paas-tools/okd4-deployment/custom-ingress/-/merge_requests/18Bump origin-haproxy-router version to 4.72021-03-10T13:24:55+01:00Iago Santos PardoBump origin-haproxy-router version to 4.7Alexandre LossentIsmael Posada TroboAlexandre Lossent