Commit Graph

130 Commits

Author SHA1 Message Date
Stefan Reimer e4ffdd5c04 fix: Upgrade Istio to 1.9.3 due to various security issues upstream 2021-04-16 11:41:13 +02:00
Stefan Reimer c831d939fe chore: Bump Istio version from 1.9.1 to 1.9.2 2021-03-26 17:34:43 +01:00
Stefan Reimer 45e21d48ff Update chart READMEs 2021-03-25 16:32:49 +01:00
Stefan Reimer b9af73a9ad Version bump charts 2021-03-02 11:28:13 +01:00
Stefan Reimer ef75ae73f6 Istio version bump due to security release 2021-03-02 10:33:12 +01:00
Stefan Reimer 322b9f6c2e Upgrade Istio to 1.9 2021-02-25 23:44:33 +01:00
Stefan Reimer ff3ae1f44f Istio minor version bump 2021-01-26 12:54:56 +00:00
Stefan Reimer c3f2c9d614 Istio version bump, ingress terminationgraceperiod patch, aws-ebs version bump 2020-12-16 03:40:14 -08:00
Stefan Reimer ed72dd796b ECK fixes for Kube 1.18, Redis cluster support incl. Enyoy proxy 2020-12-04 06:05:35 -08:00
Stefan Reimer 8b048dd390 More fixes and upgrade docs 2020-12-01 07:46:04 -08:00
Stefan Reimer 3497392c39 ArgoCd naming fixes 2020-11-30 09:30:06 -08:00
Stefan Reimer a23282bdf5 More fixes 2020-11-30 04:13:52 -08:00
Stefan Reimer bc7f4b08ed More bugfixes, ingress certs 2020-11-28 15:01:20 -08:00
Stefan Reimer 7df88c8883 Add missing .helmignore 2020-11-26 15:31:40 -08:00
Stefan Reimer 74e07acf13 More fixes now adding ArgoCD 2020-11-26 05:21:10 -08:00
Stefan Reimer 0a1cb7a07a Revert Kube version check to make argo work 2020-11-24 06:51:48 -08:00
Stefan Reimer 33bf724618 First try adding argoCD day 2 2020-11-24 06:44:57 -08:00
Stefan Reimer f711655c58 Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
Stefan Reimer 1429694e43 Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning 2020-10-05 03:50:23 -07:00
Stefan Reimer f4068455de Fix the warning due to double CRDs 2020-10-02 10:44:15 -07:00
Stefan Reimer 5904fcedf7 Istio version bump, make http10 support optional, enable redis,mysql protocol support 2020-10-02 10:38:09 -07:00
Stefan Reimer b4c2195eef Add EnvoyFilter to enable tcp keepalive for all Ingress Envoys 2020-09-17 22:25:09 +01:00
Stefan Reimer 47455bf4f0 TCP keepalive tuning for Istio 2020-09-17 17:54:57 +01:00
Stefan Reimer d3c8c92f9a Set global meshpolicy to prevent upgrade to http2 by default 2020-09-16 16:50:48 +01:00
Stefan Reimer c347c56764 Disable default poddisruptionbudgets, replace with individual todo 2020-09-11 18:21:00 +01:00
Stefan Reimer 4a405a0cbc Still double CRDs 2020-09-11 16:03:22 +01:00
Stefan Reimer fb5229613d Istio is really picky 2020-09-11 16:01:15 +01:00
Stefan Reimer f7ba0ffa33 Move ports > 1024 as we run non-root 2020-09-11 15:45:04 +01:00
Stefan Reimer 530934e603 Set JSON for access logs 2020-09-11 15:39:47 +01:00
Stefan Reimer aa664bec01 Remove xp settings 2020-09-11 15:32:14 +01:00
Stefan Reimer 7a93b34331 Re-enable JSON access logs 2020-09-11 15:28:51 +01:00
Stefan Reimer 33339dbe21 Re-enable access logs 2020-09-11 15:22:34 +01:00
Stefan Reimer 05d9e25f8d Remove deprecated fields for 1.7 2020-09-11 15:20:51 +01:00
Stefan Reimer 6f60ec1dd9 Remove deprecated fields for 1.7 2020-09-11 15:18:30 +01:00
Stefan Reimer e9c0d35695 Remove deprecated fields for 1.7 2020-09-11 15:15:53 +01:00
Stefan Reimer 203f236e23 Version bump Istio to 1.7.1 2020-09-11 15:06:38 +01:00
Stefan Reimer eba052f2f6 Remove double CRD for Istio 2020-09-11 14:42:25 +01:00
Stefan Reimer a09327f3f0 more istio cleanup 2020-09-11 12:37:22 +01:00
Stefan Reimer 5c64544dcb more istio cleanup 2020-09-11 12:32:46 +01:00
Stefan Reimer 72a2a40e81 more istio cleanup 2020-09-11 12:23:08 +01:00
Stefan Reimer 2f7693388e Minot istio tweaks 2020-09-11 12:08:58 +01:00
Stefan Reimer 4cea722fd4 Istio version bump to 1.6.9 2020-09-10 16:44:49 +01:00
Stefan Reimer 63537919a4 Move scrape username to its own secret as eck operator cleans up otherwise 2020-09-04 01:13:39 +01:00
Stefan Reimer f9821762f7 fluentd / ES fixes 2020-08-26 18:13:21 +01:00
Stefan Reimer c78e9c04ce Fix default value 2020-08-25 14:46:22 +01:00
Stefan Reimer 74abf0fbb3 Make Istio Ingress hosts specific matching the cert 2020-08-25 14:45:56 +01:00
Stefan Reimer be346b592f Add fluent-bit support to kuberzero-logging, istio fixes 2020-08-22 18:27:18 +01:00
Stefan Reimer 3cfa3512e6 Switch istio ingress to http healthchecks, more tuning 2020-08-21 14:17:47 +01:00
Stefan Reimer 5dac264e17 Also apply improved healthcehck handling and draining to public ingress 2020-08-20 18:32:01 +01:00
Stefan Reimer bdc9687bc3 Apply graceful shutdown fixes interim like Contour 2020-08-20 17:38:18 +01:00
Stefan Reimer 89d765dc53 Add graceful shutdown to Ingress gateway, might need istio 1.7 to actually work though 2020-08-20 16:55:47 +01:00
Stefan Reimer 225526869e Set Istio idle timeout to 1h 2020-08-20 16:12:41 +01:00
Stefan Reimer c5e0187475 Set Istio idle timeout 2020-08-20 15:55:49 +01:00
Stefan Reimer f11e98d69e Bugfix release for Calico, README updates 2020-08-14 17:05:25 +01:00
Stefan Reimer f703a6d7e1 Add rabbitmq ingress gateway def 2020-08-11 15:09:48 +01:00
Stefan Reimer 51bef938f6 Make sure nodeselector is a string 2020-08-10 13:28:45 +01:00
Stefan Reimer e4193dca73 make nodeselector for private ingress configurable 2020-08-10 13:20:36 +01:00
Stefan Reimer 36edd7bb73 Update all charts to use latest lib 2020-08-07 17:02:22 +01:00
Stefan Reimer 08a73b6e82 Various deps updates, Istio to 1.6.7 2020-08-06 18:43:59 +01:00
Stefan Reimer 51c1f039f3 Tweaks for aws-ebs-csi-driver, added initial aws-efs-csi-driver 2020-07-24 15:40:24 +01:00
Stefan Reimer afcd0cbc5e Remove duplicate CRD 2020-07-24 12:31:22 +01:00
Stefan Reimer 853fdfe6f8 Add LoadBalancer support to private ingress 2020-07-24 10:31:01 +00:00
Stefan Reimer d0b0829812 Make private Ingress optional but enabled by default 2020-07-23 15:01:34 +00:00
Stefan Reimer 474a0b6a96 Make kubezero work on baremetal 2020-07-23 14:52:11 +00:00
Stefan Reimer 72b6330ba8 Another round of Istio fixes 2020-07-22 20:25:18 +01:00
Stefan Reimer 9231f402f0 More istio bootstrap tweaks 2020-07-22 20:11:34 +01:00
Stefan Reimer d5ee713f73 Bugfix, move CRDs into plain manifest to help bootstrapping 2020-07-22 16:01:36 +01:00
Stefan Reimer e56bce1f41 Fix private ingress gateways affinity 2020-07-22 00:11:38 +01:00
Stefan Reimer 318e6094e2 More Istio 1.6 tuning 2020-07-22 00:08:19 +01:00
Stefan Reimer 050a56a3f8 Add KubeZero default Istio config 2020-07-21 18:30:21 +01:00
Stefan Reimer 1afe82f831 More minor fixed for new Istio integration 2020-07-15 18:13:23 +01:00
Stefan Reimer 3fc58d5c1e Set proper istio-operator values 2020-07-15 16:17:47 +01:00
Stefan Reimer 05fa490031 We skip Istio 1.5, hook into deploy flow 2020-07-15 15:21:49 +01:00
Stefan Reimer 66f6bab15b Make IPPool optional to fix bootstrap issues, doc fixes 2020-07-15 11:44:43 +01:00
Stefan Reimer 660fa06e21 Update docs 2020-07-14 20:49:20 +01:00
Stefan Reimer 3551c07381 Revert istio-operator to 1.5 as we cannot skip versions during upgrades 2020-07-14 18:17:08 +01:00
Stefan Reimer d4f59253f8 Istio-operator to 1.6 2020-07-14 18:01:13 +01:00
Stefan Reimer ca52f90153 Add Istio into kubezero, disabled by default 2020-07-14 17:39:12 +01:00
Stefan Reimer f1e78bc6b4 Fix local-path-provisioner, map istio-operator to control plane 2020-07-14 17:30:43 +01:00
Stefan Reimer a9d0a2967a Kiam minor version bump, first draft of istio chart 2020-07-14 16:58:14 +01:00