Skip to content
This repository has been archived by the owner on Jun 28, 2023. It is now read-only.

Add antrea-interworking package #5578

Open
wants to merge 13 commits into
base: main
Choose a base branch
from
Open

Add antrea-interworking package #5578

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
4044822
Add antrea-interworking package
wenqiq Nov 22, 2022
9d3b8fd
move to 1.7.2-p1
wenqiq Mar 14, 2023
537a174
Fix mp-adapter configs
wenqiq Mar 20, 2023
3b08e04
Overlay interworking config when antrea_nsx is false
wenqiq Mar 23, 2023
0d8555a
Update overlay
wenqiq Mar 23, 2023
66c7e06
Update antrea yaml to 1.9.0
wenqiq Mar 30, 2023
fd9b620
Rename fold name
wenqiq Mar 30, 2023
3c221b6
make update
wenqiq Mar 30, 2023
8ea1b0e
Update unit-test
wenqiq Mar 30, 2023
1baef8d
Update image
wenqiq Mar 30, 2023
4651c82
Update overlay
wenqiq Mar 30, 2023
13b28ee
Update overlay: bootstrapFrom: #@ values.antrea_interworking.config.b…
wenqiq Mar 31, 2023
003ee10
Update package
wenqiq Apr 3, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
69 changes: 69 additions & 0 deletions addons/packages/antrea/1.9.0/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
# antrea Package

This package provides networking and network security solution for containers using [antrea](https://antrea.io/).

## Components

## Configuration

The following configuration values can be set to customize the antrea installation.

### Global

| Value | Required/Optional | Description |
|-----------------|-------------------|-------------------------------------------------------------------------|
| `infraProvider` | Required | The cloud provider in use. One of: `aws`, `azure`, `vsphere`, `docker`. |

### antrea Configuration

| Value | Required/Optional | Description |
|--------------------------------------------------|-------------------|-------------------------------------------------------------------------------------------------------------------------|
| `antrea.config.egress.exceptCIDRs` | Optional | The CIDR ranges to which outbound Pod traffic will not be SNAT'd by Egresses |
| `antrea.config.nodePortLocal.enabled` | Optional | Enable NodePortLocal feature. Default: true |
| `antrea.config.nodePortLocal.portRange` | Optional | Provide the port range used by NodePortLocal |
| `antrea.config.antreaProxy.proxyAll` | Optional | ProxyAll tells antrea-agent to proxy all Service traffic. Default: false |
| `antrea.config.antreaProxy.nodePortAddresses` | Optional | Specifies the host IPv4/IPv6 addresses for NodePort |
| `antrea.config.antreaProxy.skipServices` | Optional | List of Services which should be ignored by AntreaProxy |
| `antrea.config.antreaProxy.proxyLoadBalancerIPs` | Optional | Load-balance traffic destined to the External IPs of LoadBalancer services. Default: false |
| `antrea.config.flowExporter.collectorAddress` | Optional | Provide the IPFIX collector address as a string. Default: `flow-aggregator.flow-aggregator.svc:4739:tls` |
| `antrea.config.flowExporter.pollInterval` | Optional | Provide flow poll interval as a duration string. Default: `5s` |
| `antrea.config.flowExporter.activeFlowTimeout` | Optional | Provide the active flow export timeout. Default: `30s` |
| `antrea.config.flowExporter.idleFlowTimeout` | Optional | Provide the idle flow export timeout. Default: `15s` |
| `antrea.config.multicast.igmpQueryInterval` | Optional | The interval at which the antrea-agent sends IGMP queries to Pods. Default: `125s` |
| `antrea.config.multicluster.enable` | Optional | Enable Antrea Multi-cluster Gateway to support cross-cluster traffic. Default: false |
| `antrea.config.multicluster.namespace` | Optional | The Namespace where Antrea Multi-cluster Controller is running. The default is antrea-agent's Namespace. Default: empty |
| `antrea.config.kubeAPIServerOverride` | Optional | Provide the address of Kubernetes apiserver. Default: nil |
| `antrea.config.transportInterface` | Optional | The name of the interface on Node which is used for tunneling or routing the traffic. Default: empty |
| `antrea.config.transportInterfaceCIDRs` | Optional | The network CIDRs of the interface on Node which is used for tunneling or routing the traffic. Default: empty |
| `antrea.config.multicastInterfaces` | Optional | The names of the interfaces on Nodes that are used to forward multicast traffic. Default: nil |
| `antrea.config.trafficEncryptionMode` | Optional | Determines how tunnel traffic is encrypted. Default: none |
| `antrea.config.wireGuard.port` | Optional | The port for WireGuard to receive traffic. Default: 51820 |
| `antrea.config.enableUsageReporting` | Optional | Enable usage reporting (telemetry) to VMware. Default: false |
| `antrea.config.serviceCIDR` | Optional | The service IPv4 CIDR to use. Default: `10.96.0.0/12` |
| `antrea.config.serviceCIDRv6` | Optional | The service IPv6 CIDR to use. Default: nil |
| `antrea.config.trafficEncapMode` | Optional | The traffic encapsulation mode. Default: `encap` |
| `antrea.config.noSNAT` | Optional | Boolean flag to enable/disable SNAT. Default: `false` |
| `antrea.config.disableUdpTunnelOffload` | Optional | Disable UDP tunnel offload feature on default NIC. Default: `false` |
| `antrea.config.defaultMTU` | Optional | MTU to use. Default: `null` (Antrea will autodetect) |
| `antrea.config.tlsCipherSuites` | Optional | List of allowed cipher suites |
| `antrea.config.enableBridgingMode` | Optional | Enable bridging mode of Pod network on Nodes. Default: `false` |
| `antrea.config.disableTXChecksumOffload` | Optional | Disable TX checksum offloading for container network interfaces. Default: `false` |
| `antrea.config.dnsServerOverride` | Optional | Provide the address of DNS server, to override the kube-dns service. Default: empty |
| `antrea.config.featureGates.AntreaProxy` | Optional | Boolean flag to enable/disable antrea proxy. Default: `true` |
| `antrea.config.featureGates.EndpointSlice` | Optional | Boolean flag to enable/disable EndpointSlice support in AntreaProxy. Default: `false` |
| `antrea.config.featureGates.AntreaTraceFlow` | Optional | Boolean flag to enable/disable antrea traceflow. Default: `false` |
| `antrea.config.featureGates.NodePortLocal` | Optional | Boolean flag to enable/disable antrea proxy. Default: `false` |
| `antrea.config.featureGates.AntreaPolicy` | Optional | Boolean flag to enable/disable antrea policy. Default: `true` |
| `antrea.config.featureGates.FlowExporter` | Optional | Boolean flag to enable/disable flow exporter. Default: `false` |
| `antrea.config.featureGates.NetworkPolicyStats` | Optional | Boolean flag to enable/disable network policy stats. Default: `false` |
| `antrea.config.featureGates.Egress` | Optional | Boolean flag to enable/disable SNAT IPs of Pod egress traffic. Default: `false` |
| `antrea.config.featureGates.AntreaIPAM` | Optional | Boolean flag to enable/disable NodePortLocal feature to make the pods reachable externally through NodePort |
| `antrea.config.featureGates.ServiceExternalIP` | Optional | Boolean flag to enable/disable NodePortLocal feature to make the pods reachable externally through NodePort |
| `antrea.config.featureGates.Multicast` | Optional | Boolean flag to enable/disable NodePortLocal feature to make the pods reachable externally through NodePort |
| `antrea.config.featureGates.Multicluster` | Optional | Boolean flag to enable/disable Antrea Multi-cluster Gateway to support cross-cluster traffic |
| `antrea.config.featureGates.SecondaryNetwork` | Optional | Boolean flag to enable/disable support for provisioning secondary network interfaces for Pods |
| `antrea.config.featureGates.TrafficControl` | Optional | Boolean flag to enable/disable support mirroring or redirecting the traffic Pods send or receive |

## Usage Example

The follow is a basic guide for getting started with antrea.
9 changes: 9 additions & 0 deletions addons/packages/antrea/1.9.0/bundle/.imgpkg/bundle.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
apiVersion: imgpkg.carvel.dev/v1alpha1
kind: Bundle
metadata:
name: antrea
authors:
- name: Hang Yan
email: yhang@vmware.com
websites:
- url: antrea.io
18 changes: 18 additions & 0 deletions addons/packages/antrea/1.9.0/bundle/.imgpkg/images.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
---
apiVersion: imgpkg.carvel.dev/v1alpha1
images:
- annotations:
kbld.carvel.dev/id: antrea/antrea-ubuntu:v1.9.0
kbld.carvel.dev/origins: |
- resolved:
tag: v1.9.0
url: antrea/antrea-ubuntu:v1.9.0
image: nsx-ujo-docker-local.artifactory.eng.vmware.com/antrea/antrea-photon@sha256:136e1eefbb3c7cd1d453c691e4c094bae00d55137e16644125037e903655e02b
- annotations:
kbld.carvel.dev/id: vmware.io/antrea/interworking:0.9.0
kbld.carvel.dev/origins: |
- resolved:
tag: latest
url: vmware.io/antrea/interworking:0.9.0
image: nsx-ujo-docker-local.artifactory.eng.vmware.com/antrea-interworking/interworking-photon@sha256:0d0783b73ed28a3e3382cb3d921f52faeb86951a80e29f1bc3d0923dacbed7d2
kind: ImagesLock
21 changes: 21 additions & 0 deletions addons/packages/antrea/1.9.0/bundle/config/kapp-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
apiVersion: kapp.k14s.io/v1alpha1
kind: Config
rebaseRules:
- path: [data]
type: copy
sources: [existing, new]
resourceMatchers:
- kindNamespaceNameMatcher: {kind: ConfigMap, namespace: kube-system, name: antrea-ca}

- path: [spec, caBundle]
type: copy
sources: [existing, new]
resourceMatchers:
- anyMatcher:
matchers:
- kindNamespaceNameMatcher: {kind: APIService, namespace: kube-system, name: v1alpha1.stats.antrea.io}
- kindNamespaceNameMatcher: {kind: APIService, namespace: kube-system, name: v1alpha1.stats.antrea.tanzu.vmware.com}
- kindNamespaceNameMatcher: {kind: APIService, namespace: kube-system, name: v1beta1.system.antrea.io}
- kindNamespaceNameMatcher: {kind: APIService, namespace: kube-system, name: v1beta1.system.antrea.tanzu.vmware.com}
- kindNamespaceNameMatcher: {kind: APIService, namespace: kube-system, name: v1beta2.controlplane.antrea.io}
- kindNamespaceNameMatcher: {kind: APIService, namespace: kube-system, name: v1beta2.controlplane.antrea.tanzu.vmware.com}
Loading