adelorenzo
/
kilo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Pin boringtun image tag (#319) 

* Pin boringtun image tag

Pin the image to a tag before boringtun's cli changed.
Specifically the --disable-drop-privileges flag need a boolean param.

* Fix image name
This commit is contained in:
leonnicolas 2022-07-11 23:17:05 +02:00 committed by GitHub
parent 6ebc914354
commit e328646617
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
e2e/kilo-kind-userspace.yaml
View File

@ -136,7 +136,7 @@ spec:
mountPath: /etc/kubernetes mountPath: /etc/kubernetes
readOnly: true readOnly: true
- name: boringtun - name: boringtun
image: leonnicolas/boringtun:alpine image: leonnicolas/boringtun:cc19859
args: args:
- --disable-drop-privileges=true - --disable-drop-privileges=true
- --foreground - --foreground

6
e2e/lib.sh
View File

@ -54,7 +54,7 @@ build_kind_config() {
export API_SERVER_PORT="${2:-6443}" export API_SERVER_PORT="${2:-6443}"
export POD_SUBNET="${3:-10.42.0.0/16}" export POD_SUBNET="${3:-10.42.0.0/16}"
export SERVICE_SUBNET="${4:-10.43.0.0/16}" export SERVICE_SUBNET="${4:-10.43.0.0/16}"
export WORKERS="" export WORKERS=""
local i=0 local i=0
while [ "$i" -lt "$WORKER_COUNT" ]; do while [ "$i" -lt "$WORKER_COUNT" ]; do
WORKERS="$(printf "%s\n- role: worker" "$WORKERS")" WORKERS="$(printf "%s\n- role: worker" "$WORKERS")"
@ -65,7 +65,7 @@ build_kind_config() {
} }
create_interface() { create_interface() {
docker run -d --name="$1" --rm --network=host --cap-add=NET_ADMIN --device=/dev/net/tun -v /var/run/wireguard:/var/run/wireguard -e WG_LOG_LEVEL=debug leonnicolas/boringtun --foreground --disable-drop-privileges true "$1" docker run -d --name="$1" --rm --network=host --cap-add=NET_ADMIN --device=/dev/net/tun -v /var/run/wireguard:/var/run/wireguard -e WG_LOG_LEVEL=debug leonnicolas/boringtun:cc19859 --foreground --disable-drop-privileges true "$1"
} }
delete_interface() { delete_interface() {
@ -126,7 +126,7 @@ create_cluster() {
# Apply Kilo the the cluster. # Apply Kilo the the cluster.
_kubectl apply -f ../manifests/crds.yaml _kubectl apply -f ../manifests/crds.yaml
_kubectl apply -f kilo-kind-userspace.yaml _kubectl apply -f kilo-kind-userspace.yaml
block_until_ready_by_name kube-system kilo-userspace block_until_ready_by_name kube-system kilo-userspace
_kubectl wait nodes --all --for=condition=Ready _kubectl wait nodes --all --for=condition=Ready
# Wait for CoreDNS. # Wait for CoreDNS.
block_until_ready kube_system k8s-app=kube-dns block_until_ready kube_system k8s-app=kube-dns

6
manifests/kilo-k3s-userspace-heterogeneous.yaml
View File

@ -298,7 +298,7 @@ spec:
mountPath: /var/run/wireguard mountPath: /var/run/wireguard
readOnly: false readOnly: false
- name: boringtun - name: boringtun
image: leonnicolas/boringtun image: leonnicolas/boringtun:cc19859
args: args:
- --disable-drop-privileges=true - --disable-drop-privileges=true
- --foreground - --foreground
@ -391,7 +391,7 @@ spec:
--- ---
kind: DaemonSet kind: DaemonSet
apiVersion: apps/v1 apiVersion: apps/v1
metadata: metadata:
name: nkml name: nkml
namespace: kube-system namespace: kube-system
labels: labels:
@ -410,7 +410,7 @@ spec:
containers: containers:
- name: nkml - name: nkml
image: leonnicolas/nkml image: leonnicolas/nkml
args: args:
- --hostname=$(NODE_NAME) - --hostname=$(NODE_NAME)
- --label-mod=wireguard - --label-mod=wireguard
- --kubeconfig=/etc/kubernetes/kubeconfig - --kubeconfig=/etc/kubernetes/kubeconfig

2
manifests/kilo-k3s-userspace.yaml
View File

@ -165,7 +165,7 @@ spec:
mountPath: /var/run/wireguard mountPath: /var/run/wireguard
readOnly: false readOnly: false
- name: boringtun - name: boringtun
image: leonnicolas/boringtun image: leonnicolas/boringtun:cc19859
args: args:
- --disable-drop-privileges=true - --disable-drop-privileges=true
- --foreground - --foreground

2
manifests/kilo-kubeadm-flannel-userspace.yaml
View File

@ -67,7 +67,7 @@ spec:
hostNetwork: true hostNetwork: true
containers: containers:
- name: boringtun - name: boringtun
image: leonnicolas/boringtun image: leonnicolas/boringtun:cc19859
args: args:
- --disable-drop-privileges=true - --disable-drop-privileges=true
- --foreground - --foreground

2
manifests/kilo-kubeadm-userspace.yaml
View File

@ -101,7 +101,7 @@ spec:
hostNetwork: true hostNetwork: true
containers: containers:
- name: boringtun - name: boringtun
image: leonnicolas/boringtun image: leonnicolas/boringtun:cc19859
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- --disable-drop-privileges=true - --disable-drop-privileges=true