Skip to content

[release-4.14] OCPBUGS-22787,OCPBUGS-22788,OCPBUGS-22789: ovnkube: container scripts cleanup #2090

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
openshift-merge-bot merged 24 commits into from
Dec 13, 2023
Merged

[release-4.14] OCPBUGS-22787,OCPBUGS-22788,OCPBUGS-22789: ovnkube: container scripts cleanup #2090

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
f91a102
Disable weak SSH cipher suites
flavio-fernandes Aug 31, 2023
3048933
ovnkube: disable conntrack on hybrid overlay VXLAN ports
dcbw May 24, 2023
2efcadb
ovnkube: remove unused bracketify() function
dcbw Sep 27, 2023
133c45e
ovnkube: remove pointless OVN_ARGS shell variable
dcbw Sep 27, 2023
a118c37
ovnkube: ovn-ctl upgrades the DB for us
dcbw Sep 27, 2023
31518d6
ovnkube: reduce readiness probe initialDelaySeconds to 10
dcbw Sep 27, 2023
6abf7e5
ovnkube: move trim-on-compaction to postStart
dcbw Sep 27, 2023
4d70aa3
ovnkube: don't need to "kill time" while the cluster converges
dcbw Sep 27, 2023
9290b17
ovnkube: stop setting a pssl connection
dcbw Sep 27, 2023
8f1d19a
ovnkube: set all NB_Global options in one go
dcbw Sep 27, 2023
9716e32
ovnkube: reduce diff between self-hosted and managed
dcbw Sep 27, 2023
79fa1b8
ovnkube: move ovn-controller container script to common library
dcbw Sep 27, 2023
0771f29
ovnkube: move northd container script to common library
dcbw Sep 27, 2023
4cdfda9
ovnkube: move audit log rotation container script to common library
dcbw Sep 27, 2023
ce6c6b9
ovnkube: move rbac proxy container script to common library
dcbw Sep 27, 2023
e7d824b
ovnkube: move nbdb container script to common library
dcbw Sep 27, 2023
362dc0e
ovnkube: move sbdb container script to common library
dcbw Sep 27, 2023
02a0208
ovnkube: move ovnkube container script to common library
dcbw Sep 27, 2023
a4be665
ovnkube: no longer need ovn-ca and ovn-cert volumes
dcbw Sep 28, 2023
aead1dd
ovnkube: make acl-logging wait a bit for ovn-controller to start
dcbw Oct 13, 2023
6dd81c1
ovnkube: ensure ovnkube-node daemonset updates when script library does
dcbw Oct 23, 2023
38c7ded
ovnkube: clean up manifest subdirs path handling
dcbw Oct 24, 2023
ad4bbbb
ovnkube: disable conntrack on Hybrid Overlay VXLAN port for multizone
dcbw Oct 25, 2023
0d21e57
ovnkube: check for IC enabled by matching script lib
dcbw Nov 21, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion bindata/kube-proxy/kube-proxy.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -142,7 +142,7 @@ spec:
exec /usr/bin/kube-rbac-proxy \
--logtostderr \
--secure-listen-address=:{{.MetricsPort}} \
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 \
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \
--upstream=http://127.0.0.1:29102/ \
--tls-private-key-file=${TLS_PK} \
--tls-cert-file=${TLS_CERT}
Expand Down
2 changes: 1 addition & 1 deletion bindata/network/multus-admission-controller/admission-controller.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -179,7 +179,7 @@ spec:
args:
- --logtostderr
- --secure-listen-address=:8443
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- --upstream=http://127.0.0.1:9091/
- --tls-private-key-file=/etc/webhook/tls.key
- --tls-cert-file=/etc/webhook/tls.crt
Expand Down
2 changes: 1 addition & 1 deletion bindata/network/network-metrics/001-daemonset.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@ spec:
args:
- --logtostderr
- --secure-listen-address=:8443
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- --upstream=http://127.0.0.1:9091/
- --tls-private-key-file=/etc/metrics/tls.key
- --tls-cert-file=/etc/metrics/tls.crt
Expand Down
2 changes: 1 addition & 1 deletion bindata/network/openshift-sdn/controller.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -99,7 +99,7 @@ spec:
exec /usr/bin/kube-rbac-proxy \
--logtostderr \
--secure-listen-address=:9106 \
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 \
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \
--upstream=http://127.0.0.1:29100/ \
--tls-private-key-file=${TLS_PK} \
--tls-cert-file=${TLS_CERT}
Expand Down
2 changes: 1 addition & 1 deletion bindata/network/openshift-sdn/sdn.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -293,7 +293,7 @@ spec:
exec /usr/bin/kube-rbac-proxy \
--logtostderr \
--secure-listen-address=:9101 \
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 \
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \
--upstream=http://127.0.0.1:29101/ \
--tls-private-key-file=${TLS_PK} \
--tls-cert-file=${TLS_CERT}
Expand Down
Loading