-
Notifications
You must be signed in to change notification settings - Fork 40
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Firewalld as DaemonSet #1429
base: master
Are you sure you want to change the base?
Firewalld as DaemonSet #1429
Conversation
@@ -61,12 +47,19 @@ spec: | |||
name: weave-passwd | |||
key: weave-passwd | |||
image: '<%= image_repository %>/weave-kube:<%= version %>' | |||
livenessProbe: | |||
readinessProbe: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Upstream has already switched to readinessProbe
.
httpGet: | ||
host: 127.0.0.1 | ||
path: /status | ||
port: 6784 | ||
initialDelaySeconds: 30 | ||
livenessProbe: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This ensures that required iptables rules are in place.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Maybe we can merge this now using the latest
tag of the FW image to allow faster iteration. Then when getting closer to release we could switch to tagged version.
@jnummelin this breaks systems with |
Moves firewalld from host to Kubernetes DaemonSet.
Also bumps DNS node cache to v1.15.2 (handles iptables changes better).