icn/sdwan.git
3 years agoHelm Chart and example updates 97/4697/3 21.12.03
Le Yao [Thu, 17 Feb 2022 04:35:38 +0000 (23:35 -0500)]
Helm Chart and example updates

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I1b1ab2fbf11d12d1c784fa74d504e1b7d8da29cd

3 years agoRemove Ctrl+M from repo 96/4696/2
Le Yao [Thu, 17 Feb 2022 02:20:59 +0000 (21:20 -0500)]
Remove Ctrl+M from repo

Ctrl+M indents the paragraph under Windows

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ibf1a1cebf94078897363af83442c542fec98e4c1

3 years agoMerge "Add Certificate utility for easy usage"
Huifeng Le [Thu, 17 Feb 2022 02:00:08 +0000 (02:00 +0000)]
Merge "Add Certificate utility for easy usage"

3 years agoMerge "Fix wrong value usage"
Huifeng Le [Thu, 17 Feb 2022 01:59:33 +0000 (01:59 +0000)]
Merge "Fix wrong value usage"

3 years agoMerge "Fix the crd-controller with v1 version"
Huifeng Le [Thu, 17 Feb 2022 01:58:34 +0000 (01:58 +0000)]
Merge "Fix the crd-controller with v1 version"

3 years agoAdd Certificate utility for easy usage 95/4695/2
Ruoyu Ying [Thu, 17 Feb 2022 01:33:43 +0000 (20:33 -0500)]
Add Certificate utility for easy usage

* Place cert util under /src/scc/tools

Change-Id: Ia749f8104b0af123ccad7d7ff6b26acadea5b494
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoFix wrong value usage 94/4694/1
Le Yao [Thu, 17 Feb 2022 01:19:08 +0000 (20:19 -0500)]
Fix wrong value usage

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ibf59509620bd7d7d62a492ea3b28f5d21e653dee

3 years agoFix the crd-controller with v1 version 85/4685/2
Le Yao [Tue, 15 Feb 2022 08:20:35 +0000 (03:20 -0500)]
Fix the crd-controller with v1 version

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ic27bd6fde16bf179639afa38e3d0e82002c81d6e

3 years agoDependencies updates 29/4629/4
Le Yao [Wed, 26 Jan 2022 08:54:44 +0000 (03:54 -0500)]
Dependencies updates

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I91ec9c8e5d3efa9d3ad840449d4f78f425a5c994

3 years agoFix the bug that ensures consistency 82/4682/3
Le Yao [Mon, 14 Feb 2022 00:59:44 +0000 (19:59 -0500)]
Fix the bug that ensures consistency

Ip and interface are not configured correctly

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I108629dc96b59e8347a0d662c6ddf23429e1f2e4

3 years agoMinor fixes in scc 72/4672/2
Ruoyu Ying [Tue, 8 Feb 2022 05:06:36 +0000 (00:06 -0500)]
Minor fixes in scc

* Add db operations after deleting delegate hub
* Fix typo

Change-Id: I103063f786cfdfe294993abea2ef3f868da6193c
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoMigrate Kubebuilder v2 to v3 26/4626/6
Le Yao [Fri, 21 Jan 2022 00:49:10 +0000 (19:49 -0500)]
Migrate Kubebuilder v2 to v3

The minimal updates

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ia33790bd0957534c91e73d01725ea63433c28ef3

3 years agoFix various issues in device registration 96/4596/2
Ruoyu Ying [Wed, 5 Jan 2022 01:25:58 +0000 (20:25 -0500)]
Fix various issues in device registration

* delete ipsec proposal while unregistering device
* check counter party before setup edge-edge tunnels
* remove global variable ips

Change-Id: I9dd1afc7057eb4e31f23095114b0bce258f4a277
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoFix the cnf pod restart issue 81/4581/1 21.12.02
Le Yao [Fri, 24 Dec 2021 07:44:34 +0000 (07:44 +0000)]
Fix the cnf pod restart issue

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ieb3f5b6dd66bb38ed79656b767c07b614061d9cf

3 years agoFix in updown script 80/4580/1
Ruoyu [Fri, 24 Dec 2021 08:48:22 +0000 (03:48 -0500)]
Fix in updown script

Change-Id: Iee1bdc0da2e17025b63a353b10b534af03040eb5
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoMerge "Minor changes in updown script"
Huifeng Le [Thu, 23 Dec 2021 06:02:04 +0000 (06:02 +0000)]
Merge "Minor changes in updown script"

3 years agoMinor changes in updown script 77/4577/2
Ruoyu Ying [Thu, 23 Dec 2021 05:29:22 +0000 (00:29 -0500)]
Minor changes in updown script

Change-Id: Ifd6f91087d6bf16de106faa90fe5a57137c798dd
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoMerge "Update the helm chart to release 0.5.0"
Huifeng Le [Thu, 23 Dec 2021 04:02:24 +0000 (04:02 +0000)]
Merge "Update the helm chart to release 0.5.0"

3 years agoMerge "New changes in scc to support multi-hub"
Huifeng Le [Thu, 23 Dec 2021 02:23:08 +0000 (02:23 +0000)]
Merge "New changes in scc to support multi-hub"

3 years agoUpdate the helm chart to release 0.5.0 76/4576/2
Le Yao [Thu, 23 Dec 2021 02:06:24 +0000 (10:06 +0800)]
Update the helm chart to release 0.5.0

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I69e7f8da56c0328fcb95615362227967a353495c

3 years agoNew changes in scc to support multi-hub 72/4572/3
Ruoyu Ying [Tue, 21 Dec 2021 08:49:29 +0000 (03:49 -0500)]
New changes in scc to support multi-hub

Change-Id: I3479dd905eddbf5ff0d0b688e18ea9c8ada52b48
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoFix service issue and patch cnf 75/4575/1
Le Yao [Wed, 22 Dec 2021 07:06:41 +0000 (07:06 +0000)]
Fix service issue and patch cnf

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Icdf1a2d87034e2e04600ed0613e26eaf78000bc8

3 years agoMerge "Enable QAT and document for it."
Huifeng Le [Wed, 22 Dec 2021 05:50:14 +0000 (05:50 +0000)]
Merge "Enable QAT and document for it."

3 years agoEnable QAT and document for it. 65/4565/5
Le Yao [Tue, 14 Dec 2021 04:32:58 +0000 (04:32 +0000)]
Enable QAT and document for it.

Enable QAT with LKCF mode in openwrt.
Guide for IPSec accelerated by QAT.

Change-Id: I8f2d5d0a3e2dce9fafde65bab8055201efa24418
Signed-off-by: Le Yao <le.yao@intel.com>
3 years agoMerge "New changes in CNF"
Huifeng Le [Tue, 21 Dec 2021 09:20:16 +0000 (09:20 +0000)]
Merge "New changes in CNF"

3 years agoNew changes in CNF 71/4571/2
Ruoyu Ying [Mon, 20 Dec 2021 14:43:28 +0000 (09:43 -0500)]
New changes in CNF

* Update updown scripts for edge/hub
* Upload rest of the changes in config resolution

Change-Id: Ied71d169c167cfd3b4e4b8ce44024d5d44258e81
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoCreate helm chart for cnf and crd controller 67/4567/6
Le Yao [Wed, 15 Dec 2021 02:23:07 +0000 (02:23 +0000)]
Create helm chart for cnf and crd controller

Create helm chart for CNF and CRD controller.
Add example configuration file for deployment.
Guide to deploy the helm.

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I3982a4c17ed5f1d4fa00de865fefdda83f2a7470

3 years agoPatch based on the make generate and fmt 51/4551/1
Le Yao [Wed, 8 Dec 2021 05:58:45 +0000 (05:58 +0000)]
Patch based on the make generate and fmt

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I9c28b7eace19430988ce928ca43d13c6b81a3759

3 years agoAdd support for NAT and LocalService 33/4533/3 21-12-01
Huifeng Le [Mon, 29 Nov 2021 14:31:30 +0000 (22:31 +0800)]
Add support for NAT and LocalService

Update implementation for route and rule

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I314ab5fbdfec3c1b7bda5e61d373ddfd1ea57bad
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
3 years agoUpdate base image to openwrt1907 58/4458/2
Le Yao [Fri, 24 Sep 2021 02:05:52 +0000 (02:05 +0000)]
Update base image to openwrt1907

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I6787fb78b1890fd0616766535f7f110f56f41bf0

3 years agoMerge "Istio integration guide"
Huifeng Le [Wed, 25 Aug 2021 03:33:05 +0000 (03:33 +0000)]
Merge "Istio integration guide"

3 years agoIstio integration guide 82/4382/10
Le Yao [Thu, 29 Jul 2021 05:56:52 +0000 (05:56 +0000)]
Istio integration guide

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I86eb9fe690d898996fb3701ec089f57ac24c19d3

3 years agoRemove dependency on MinIO 92/4392/1
Huifeng Le [Sat, 7 Aug 2021 03:34:44 +0000 (11:34 +0800)]
Remove dependency on MinIO

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Ife667fa1ea887e8ddd47f012c98ccd4d2807839f
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
3 years agoMerge "Update the license"
Huifeng Le [Sat, 7 Aug 2021 03:22:08 +0000 (03:22 +0000)]
Merge "Update the license"

3 years agoFix number of issues 89/4389/2
Ruoyu [Thu, 5 Aug 2021 02:58:52 +0000 (10:58 +0800)]
Fix number of issues

- Change dependency rules set for hub-device connection
- Fix 'type' issue in ipsec.lua
- First change the updown script to create concrete vti tunnels

Change-Id: Iab381c4768240cebcf5eaff5d221349304c7bbaa
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoUpdate the license 86/4386/1
Huifeng Le [Wed, 4 Aug 2021 05:56:46 +0000 (13:56 +0800)]
Update the license

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I19b58e16ebcdc46c5a9a7b1cfc8b7c1502f49ab7

3 years agoFix go sync null pointer bug 69/4369/1
Le Yao [Fri, 9 Jul 2021 05:50:17 +0000 (05:50 +0000)]
Fix go sync null pointer bug

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I6e422a502be3ab10786cc72df9e363625d9c209f

3 years agoIntegrate the latest cnf and crd code change 53/4353/3
Le Yao [Wed, 23 Jun 2021 08:03:14 +0000 (08:03 +0000)]
Integrate the latest cnf and crd code change

Enhance the crd controller and sdewan cnf

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I05f4da221e923638520d89704d85acd029d9bf97

3 years agoMerge "Fix IpRange amd meta check"
Huifeng Le [Fri, 18 Jun 2021 01:33:20 +0000 (01:33 +0000)]
Merge "Fix IpRange amd meta check"

3 years agoFix IpRange amd meta check 46/4346/2
Le Yao [Tue, 15 Jun 2021 06:45:32 +0000 (06:45 +0000)]
Fix IpRange amd meta check

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ib6be76a352ac63ae7cf18f572cf8b44ea0b50de3

3 years agoCLI support 45/4345/2
Huifeng Le [Tue, 15 Jun 2021 04:18:36 +0000 (12:18 +0800)]
CLI support

Add ewoctl to support configure overlay controller through command line.

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I2d9c9370f561e45a84c8f2bb72181ae8dfa32b32

3 years agoAdd CNF status query based on latest rsync 15/4315/2
Le Yao [Wed, 9 Jun 2021 03:00:15 +0000 (03:00 +0000)]
Add CNF status query based on latest rsync

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Idd63fab9c59311f96a84caf4ca645d16a477730b

3 years agoFix the entrypoint typo 96/4296/1
Le Yao [Mon, 24 May 2021 05:52:14 +0000 (05:52 +0000)]
Fix the entrypoint typo

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I4391bfa8a9bbd58fd687f489ba0ebb5b1e49be47

4 years agoAdd Overlay Controller into icn-sdwan repo 84/4184/1
Ruoyu [Tue, 23 Mar 2021 07:11:46 +0000 (15:11 +0800)]
Add Overlay Controller into icn-sdwan repo

*Add base code for Overlay Controller

Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
Change-Id: I4177c0b5c769ceb57399ab67acd7e1a56e7910da

4 years agoFix VTI support in cnf 53/4153/3
Ruoyu [Thu, 4 Feb 2021 17:29:56 +0000 (12:29 -0500)]
Fix VTI support in cnf

* Add base64 decoding for cert
* Repair public key authentication

Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
Change-Id: I6c68143f067731118b6e175fb3523d823f26b708
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
4 years agoMerge "Implement Route CR controller"
Huifeng Le [Thu, 4 Feb 2021 02:16:16 +0000 (02:16 +0000)]
Merge "Implement Route CR controller"

4 years agoMerge "Implement Route RESTful API"
Huifeng Le [Thu, 4 Feb 2021 02:13:18 +0000 (02:13 +0000)]
Merge "Implement Route RESTful API"

4 years agoImplement Route CR controller 54/4054/3
Le Yao [Fri, 15 Jan 2021 07:32:23 +0000 (07:32 +0000)]
Implement Route CR controller

The Route CR controller handles the Route resource and call CNF Route
RESTful API to add/update/delete/get the route rule.

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I95871e1e95ccacf5790697d2e5105448f630aac2

4 years agoImplement Route RESTful API 53/4053/4
Le Yao [Thu, 14 Jan 2021 07:54:13 +0000 (07:54 +0000)]
Implement Route RESTful API

Offer the Route add/del/replace APIs for users

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I43c44f0de048e40a254cab370a872616ecd28ad2

4 years agoCNFStatus CRD Controller 52/4052/1
Huifeng Le [Thu, 14 Jan 2021 07:24:15 +0000 (15:24 +0800)]
CNFStatus CRD Controller

Add CNFStatus CRD controller to query CNF status periodically

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I86a7fca4fd9248a22cadda30babde4346ea29bd8

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Ie5ed1f5d5ad87c367ad0a3342105515a44725558
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
4 years agoMerge "Add API for CNF's status information query"
Huifeng Le [Thu, 14 Jan 2021 05:31:45 +0000 (05:31 +0000)]
Merge "Add API for CNF's status information query"

4 years agoRegister service and applicaion CR to webhook 51/4051/1
Le Yao [Thu, 14 Jan 2021 04:56:11 +0000 (04:56 +0000)]
Register service and applicaion CR to webhook

Register new CRs to Webhook
Fix some typo errors

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I7a0556cf9877769b55f41598cfdca9df182b94d1

4 years agoAdd API for CNF's status information query 42/4042/3
Huifeng Le [Thu, 7 Jan 2021 06:48:45 +0000 (06:48 +0000)]
Add API for CNF's status information query

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Ieb564cfda4cabb8994a311f0fc6a47ecf337da29
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
4 years agoMerge "Add watch to cnf service controller"
Huifeng Le [Thu, 7 Jan 2021 03:03:08 +0000 (03:03 +0000)]
Merge "Add watch to cnf service controller"

4 years agoMerge "Add watch mechanism for pod to auto sync"
Huifeng Le [Thu, 7 Jan 2021 03:02:14 +0000 (03:02 +0000)]
Merge "Add watch mechanism for pod to auto sync"

4 years agoAdd watch to cnf service controller 41/4041/1
Le Yao [Wed, 6 Jan 2021 08:08:03 +0000 (08:08 +0000)]
Add watch to cnf service controller

Watch the CNF deployment status and sync

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I8cb9593e5da54bbd8662ca64ee246c107e3ecd4c

4 years agoEnhance CNF Application RESTful API 10/4010/2
Le Yao [Fri, 25 Dec 2020 08:35:59 +0000 (08:35 +0000)]
Enhance CNF Application RESTful API

Handle NULL cases and enhance the Application reconcile workload

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I783a2f47743b3bdf64165f25dcbdbcef889c9f8e

4 years agoAdd watch mechanism for pod to auto sync 93/3993/5
Le Yao [Tue, 15 Dec 2020 08:46:57 +0000 (08:46 +0000)]
Add watch mechanism for pod to auto sync

Sync status and reconcile when pod status change

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Icad1caf52e43d25106753c02525e1eaceb449ba2

4 years agoMerge "Application CR implemention"
Huifeng Le [Tue, 15 Dec 2020 08:44:28 +0000 (08:44 +0000)]
Merge "Application CR implemention"

4 years agoImplement Application RESTful API 36/3936/4
Le Yao [Fri, 27 Nov 2020 08:25:29 +0000 (08:25 +0000)]
Implement Application RESTful API

The API is used to add ip rules for Application in CNF

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I82bc0a428cc1edb8d193d8ab0bf74fc52e0715c1

4 years agoMerge "Handle some un-covered errors"
Huifeng Le [Tue, 15 Dec 2020 08:01:58 +0000 (08:01 +0000)]
Merge "Handle some un-covered errors"

4 years agoMerge "Update the license to Apache License 2.0"
Huifeng Le [Tue, 15 Dec 2020 08:00:57 +0000 (08:00 +0000)]
Merge "Update the license to Apache License 2.0"

4 years agoMerge "Create Non-root user in CNF"
Huifeng Le [Fri, 11 Dec 2020 15:03:01 +0000 (15:03 +0000)]
Merge "Create Non-root user in CNF"

4 years agoApplication CR implemention 30/3930/5
Le Yao [Mon, 23 Nov 2020 06:15:36 +0000 (06:15 +0000)]
Application CR implemention

Implement Application CR and CR controller.
Call Application RESTful API to add rules for Application deployment.
Handle missing errors.

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I425f431bea20f372dc95cde1439259ad29e93773

4 years agoMerge "Add README for e2e test" release-v1.0 v1.0
Huifeng Le [Fri, 4 Dec 2020 08:51:52 +0000 (08:51 +0000)]
Merge "Add README for e2e test"

4 years agoAdd README for e2e test 69/3969/3
Ruoyu [Fri, 4 Dec 2020 11:20:31 +0000 (06:20 -0500)]
Add README for e2e test

Add README to e2e test folder

Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
Change-Id: I94482aaf3fc8051861edac6376fadf1e9bd1c865
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoMerge "Apply changes of installer.sh"
Huifeng Le [Fri, 4 Dec 2020 08:50:49 +0000 (08:50 +0000)]
Merge "Apply changes of installer.sh"

4 years agoApply changes of installer.sh 42/3942/3
Ruoyu [Tue, 1 Dec 2020 11:17:15 +0000 (06:17 -0500)]
Apply changes of installer.sh

Apply changes to installer.sh
to fix kubespray issue

Change-Id: Ib63e34f6f47b090802149e8ec3ba6e22dd390747
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoupdate readme 65/3965/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 04:38:15 +0000 (20:38 -0800)]
update readme

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: Ib43e852503addf0bf2af7154c78d6ff915304d27

4 years agoadding validation and end2end test results 64/3964/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 04:27:51 +0000 (20:27 -0800)]
adding validation and end2end test results

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I43bacb5a9769d6c45689f042371eee3e92dce6d5

4 years agoadding markdown fixes 63/3963/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 03:59:42 +0000 (19:59 -0800)]
adding markdown fixes

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I20ceb6ae8961344585be165602da2111907c65dc

4 years agoupdate readme 62/3962/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 03:51:00 +0000 (19:51 -0800)]
update readme

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I9b7e25ba79a6d340c328aed4607bd7acbea84499

4 years agoadding contributing documents 61/3961/2
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 02:47:00 +0000 (18:47 -0800)]
adding contributing documents

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I556ec1a67f3051cbfee2fbf39320a66a59c485ca

4 years agoUpdate the license to Apache License 2.0 56/3956/1
Le Yao [Wed, 2 Dec 2020 07:12:57 +0000 (07:12 +0000)]
Update the license to Apache License 2.0

Change to Apache License 2.0
Add copyright info

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I725ac47c82405429d5157f485ea7a229b6e63f2a

4 years agoHandle some un-covered errors 55/3955/1
Le Yao [Tue, 1 Dec 2020 08:44:15 +0000 (08:44 +0000)]
Handle some un-covered errors

Response error code and message to client

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I326ccb7411ba938f37da53e57b206c4800bca2e2

4 years agoCreate Non-root user in CNF 43/3943/1
Le Yao [Tue, 1 Dec 2020 05:40:01 +0000 (05:40 +0000)]
Create Non-root user in CNF

Create a non-root user wrt with privilege in CNF

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I083ef1fa6ea5853bb2e9eb0320c4b6a2d7034e5e

4 years agoMerge "Add api-server SNAT rule and enable forward"
Huifeng Le [Tue, 1 Dec 2020 02:45:10 +0000 (02:45 +0000)]
Merge "Add api-server SNAT rule and enable forward"

4 years agoFix helm issue from v2 to v3 35/3935/1
Le Yao [Fri, 27 Nov 2020 05:54:11 +0000 (05:54 +0000)]
Fix helm issue from v2 to v3

Update the scripts to use helm v3

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I79496e1a92e00a9ce60ceac789e81f007dd208c0

4 years agoAdd api-server SNAT rule and enable forward 21/3921/1
Le Yao [Wed, 18 Nov 2020 06:28:22 +0000 (06:28 +0000)]
Add api-server SNAT rule and enable forward

Add the SNAT rule for api-server
Enable net.ipv4.ip_forward in CNF

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: If31a6d8070d922a1f3e70bb94f85f349b3682379

4 years agoMerge "Add OpenAPI definition for Central Controller"
Huifeng Le [Fri, 30 Oct 2020 08:19:07 +0000 (08:19 +0000)]
Merge "Add OpenAPI definition for Central Controller"

4 years agoMerge "Update the firewall restart script"
Huifeng Le [Thu, 29 Oct 2020 06:41:34 +0000 (06:41 +0000)]
Merge "Update the firewall restart script"

4 years agoMerge "Service CR implemention"
Huifeng Le [Thu, 29 Oct 2020 06:37:19 +0000 (06:37 +0000)]
Merge "Service CR implemention"

4 years agoAdd OpenAPI definition for Central Controller 54/3854/1
Huifeng Le [Thu, 29 Oct 2020 06:29:22 +0000 (14:29 +0800)]
Add OpenAPI definition for Central Controller

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Id4cd1ff4e53b2435aa30a116495f88931983a053

4 years agoMerge "Implement Service RESTful API for hub"
Huifeng Le [Tue, 13 Oct 2020 02:18:11 +0000 (02:18 +0000)]
Merge "Implement Service RESTful API for hub"

4 years agoImplement Service RESTful API for hub 08/3708/5
Yao Le [Thu, 17 Sep 2020 04:25:47 +0000 (04:25 +0000)]
Implement Service RESTful API for hub

The API handles service POST, GET and DELETE call

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I2e75f1ae0d7a33b58c620f5637b36994fecc7381

4 years agoService CR implemention 89/3789/3
Yao Le [Sun, 27 Sep 2020 08:29:44 +0000 (08:29 +0000)]
Service CR implemention

When apply a Service CR, the controller will call service RESTful API
to configure iptables in CNF.

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: Ifb645c7d0712b9719a72c09623cba9f7fe778459

4 years agoUpdate the firewall restart script 11/3711/3
Yao Le [Mon, 21 Sep 2020 03:08:44 +0000 (03:08 +0000)]
Update the firewall restart script

Get the service IP and configuration
Config the service iptables NAT rules

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I74bd5236f4e56ea9d20e7eee6d4210e1ab04e0c0

4 years agoAdd license header 15/3715/2
Huifeng Le [Wed, 23 Sep 2020 08:31:57 +0000 (16:31 +0800)]
Add license header

Change-Id: I10c93df1a3be146a1c0e3c1eb717bdfa368d3e09
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
4 years agoMinor updates for cnf 60/3660/7
Ruoyu [Wed, 5 Aug 2020 07:26:43 +0000 (15:26 +0800)]
Minor updates for cnf

* Update the configmap for cnf
* Change default values set for dpd
* Add length check for zone name
Change-Id: Ic0d8fcca36aca2f712354ed3c03ae0e7ae961b43
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoA service controller integrated with the watch 57/3657/2
Yao Le [Tue, 4 Aug 2020 03:16:11 +0000 (03:16 +0000)]
A service controller integrated with the watch

A watch to monitor the changes of the service cluster IP and restart the
firewall in CNF.
A controller to hold the watch function and monitor the potential CRs.

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I46e08e0403debd03e7f6bf7bf16507a0760382b7

4 years agoMinor changes for Istio configuration 40/3640/1
Ruoyu [Thu, 23 Jul 2020 01:48:01 +0000 (09:48 +0800)]
Minor changes for Istio configuration

*Apply minor changes for remote access to Istio ingress

Change-Id: I650e57041c317fcf91c674b4ed4fd93ef3cb30df

4 years agoMerge "Support e2e test thru CRs"
Huifeng Le [Mon, 20 Jul 2020 06:45:27 +0000 (06:45 +0000)]
Merge "Support e2e test thru CRs"

4 years agoSupport e2e test thru CRs 03/3603/19
Ruoyu [Sun, 28 Jun 2020 05:22:40 +0000 (13:22 +0800)]
Support e2e test thru CRs

* Installing the CNF and the controller with helm charts
* Applying the firewall and IPsec configs thru CRs
* Adding default policies to enable remote access to api server and Istio ingress

Issue-ID: ICN-390
Change-Id: I7c5ca03829ad1a7c3c90bc4edb5921ec60d4e530
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoUpdate sdewan readme file 05/3605/1
chengli3 [Wed, 1 Jul 2020 00:22:18 +0000 (00:22 +0000)]
Update sdewan readme file

Marking the cnf watchting task as finished

Signed-off-by: chengli3 <cheng1.li@intel.com>
Change-Id: I81451b4a5aea38d27f1969d9852fb96775eb5516

4 years agoApply the watch function to all controllers 77/3577/2
Yao Le [Wed, 17 Jun 2020 08:40:10 +0000 (08:40 +0000)]
Apply the watch function to all controllers

Add the necessray watch for all CRs and the associated CNFs

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I52e53afbdcc4034820a6db90c6dd2502b8e31692

4 years agoMerge "Add watch for CR and CNF"
Cheng Li [Wed, 17 Jun 2020 05:43:48 +0000 (05:43 +0000)]
Merge "Add watch for CR and CNF"

4 years agoMerge "Add CRD for IpsecSite"
Cheng Li [Wed, 17 Jun 2020 02:53:22 +0000 (02:53 +0000)]
Merge "Add CRD for IpsecSite"

4 years agoAdd CRD for IpsecSite 75/3575/8
root [Tue, 16 Jun 2020 09:09:49 +0000 (09:09 +0000)]
Add CRD for IpsecSite

 * Add changes for another IPSec crd: IpsecSite

Issue-ID: ICN-289
Change-Id: I9c76c28ec22640b0089e0bc097a316af68b6fd19
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoUpgrade k8s version in e2e script 48/3548/2
Ruoyu [Thu, 4 Jun 2020 13:23:02 +0000 (21:23 +0800)]
Upgrade k8s version in e2e script

Issue-ID: ICN-314
Signed-off-by: Ruoyu<ruoyu.ying@intel.com>
Change-Id: I0878e5451a05ce0ffad2a99bd53247c1c670a93a

4 years agoAdd watch for CR and CNF 44/3544/3
Yao Le [Thu, 4 Jun 2020 16:13:27 +0000 (00:13 +0800)]
Add watch for CR and CNF

Watch the CNF status and push the related CR requests to queue.

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: Id3adaf68b860efefdb00ffe5620aef11b9aa787f