icn/sdwan.git
3 years agoDependencies updates 29/4629/4
Le Yao [Wed, 26 Jan 2022 08:54:44 +0000 (03:54 -0500)]
Dependencies updates

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I91ec9c8e5d3efa9d3ad840449d4f78f425a5c994

3 years agoFix the bug that ensures consistency 82/4682/3
Le Yao [Mon, 14 Feb 2022 00:59:44 +0000 (19:59 -0500)]
Fix the bug that ensures consistency

Ip and interface are not configured correctly

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I108629dc96b59e8347a0d662c6ddf23429e1f2e4

3 years agoMinor fixes in scc 72/4672/2
Ruoyu Ying [Tue, 8 Feb 2022 05:06:36 +0000 (00:06 -0500)]
Minor fixes in scc

* Add db operations after deleting delegate hub
* Fix typo

Change-Id: I103063f786cfdfe294993abea2ef3f868da6193c
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoMigrate Kubebuilder v2 to v3 26/4626/6
Le Yao [Fri, 21 Jan 2022 00:49:10 +0000 (19:49 -0500)]
Migrate Kubebuilder v2 to v3

The minimal updates

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ia33790bd0957534c91e73d01725ea63433c28ef3

3 years agoFix various issues in device registration 96/4596/2
Ruoyu Ying [Wed, 5 Jan 2022 01:25:58 +0000 (20:25 -0500)]
Fix various issues in device registration

* delete ipsec proposal while unregistering device
* check counter party before setup edge-edge tunnels
* remove global variable ips

Change-Id: I9dd1afc7057eb4e31f23095114b0bce258f4a277
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoFix the cnf pod restart issue 81/4581/1 21.12.02
Le Yao [Fri, 24 Dec 2021 07:44:34 +0000 (07:44 +0000)]
Fix the cnf pod restart issue

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ieb3f5b6dd66bb38ed79656b767c07b614061d9cf

3 years agoFix in updown script 80/4580/1
Ruoyu [Fri, 24 Dec 2021 08:48:22 +0000 (03:48 -0500)]
Fix in updown script

Change-Id: Iee1bdc0da2e17025b63a353b10b534af03040eb5
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoMerge "Minor changes in updown script"
Huifeng Le [Thu, 23 Dec 2021 06:02:04 +0000 (06:02 +0000)]
Merge "Minor changes in updown script"

3 years agoMinor changes in updown script 77/4577/2
Ruoyu Ying [Thu, 23 Dec 2021 05:29:22 +0000 (00:29 -0500)]
Minor changes in updown script

Change-Id: Ifd6f91087d6bf16de106faa90fe5a57137c798dd
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoMerge "Update the helm chart to release 0.5.0"
Huifeng Le [Thu, 23 Dec 2021 04:02:24 +0000 (04:02 +0000)]
Merge "Update the helm chart to release 0.5.0"

3 years agoMerge "New changes in scc to support multi-hub"
Huifeng Le [Thu, 23 Dec 2021 02:23:08 +0000 (02:23 +0000)]
Merge "New changes in scc to support multi-hub"

3 years agoUpdate the helm chart to release 0.5.0 76/4576/2
Le Yao [Thu, 23 Dec 2021 02:06:24 +0000 (10:06 +0800)]
Update the helm chart to release 0.5.0

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I69e7f8da56c0328fcb95615362227967a353495c

3 years agoNew changes in scc to support multi-hub 72/4572/3
Ruoyu Ying [Tue, 21 Dec 2021 08:49:29 +0000 (03:49 -0500)]
New changes in scc to support multi-hub

Change-Id: I3479dd905eddbf5ff0d0b688e18ea9c8ada52b48
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoFix service issue and patch cnf 75/4575/1
Le Yao [Wed, 22 Dec 2021 07:06:41 +0000 (07:06 +0000)]
Fix service issue and patch cnf

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Icdf1a2d87034e2e04600ed0613e26eaf78000bc8

3 years agoMerge "Enable QAT and document for it."
Huifeng Le [Wed, 22 Dec 2021 05:50:14 +0000 (05:50 +0000)]
Merge "Enable QAT and document for it."

3 years agoEnable QAT and document for it. 65/4565/5
Le Yao [Tue, 14 Dec 2021 04:32:58 +0000 (04:32 +0000)]
Enable QAT and document for it.

Enable QAT with LKCF mode in openwrt.
Guide for IPSec accelerated by QAT.

Change-Id: I8f2d5d0a3e2dce9fafde65bab8055201efa24418
Signed-off-by: Le Yao <le.yao@intel.com>
3 years agoMerge "New changes in CNF"
Huifeng Le [Tue, 21 Dec 2021 09:20:16 +0000 (09:20 +0000)]
Merge "New changes in CNF"

3 years agoNew changes in CNF 71/4571/2
Ruoyu Ying [Mon, 20 Dec 2021 14:43:28 +0000 (09:43 -0500)]
New changes in CNF

* Update updown scripts for edge/hub
* Upload rest of the changes in config resolution

Change-Id: Ied71d169c167cfd3b4e4b8ce44024d5d44258e81
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
3 years agoCreate helm chart for cnf and crd controller 67/4567/6
Le Yao [Wed, 15 Dec 2021 02:23:07 +0000 (02:23 +0000)]
Create helm chart for cnf and crd controller

Create helm chart for CNF and CRD controller.
Add example configuration file for deployment.
Guide to deploy the helm.

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I3982a4c17ed5f1d4fa00de865fefdda83f2a7470

3 years agoPatch based on the make generate and fmt 51/4551/1
Le Yao [Wed, 8 Dec 2021 05:58:45 +0000 (05:58 +0000)]
Patch based on the make generate and fmt

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I9c28b7eace19430988ce928ca43d13c6b81a3759

3 years agoAdd support for NAT and LocalService 33/4533/3 21-12-01
Huifeng Le [Mon, 29 Nov 2021 14:31:30 +0000 (22:31 +0800)]
Add support for NAT and LocalService

Update implementation for route and rule

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I314ab5fbdfec3c1b7bda5e61d373ddfd1ea57bad
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
3 years agoUpdate base image to openwrt1907 58/4458/2
Le Yao [Fri, 24 Sep 2021 02:05:52 +0000 (02:05 +0000)]
Update base image to openwrt1907

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I6787fb78b1890fd0616766535f7f110f56f41bf0

3 years agoMerge "Istio integration guide"
Huifeng Le [Wed, 25 Aug 2021 03:33:05 +0000 (03:33 +0000)]
Merge "Istio integration guide"

3 years agoIstio integration guide 82/4382/10
Le Yao [Thu, 29 Jul 2021 05:56:52 +0000 (05:56 +0000)]
Istio integration guide

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I86eb9fe690d898996fb3701ec089f57ac24c19d3

3 years agoRemove dependency on MinIO 92/4392/1
Huifeng Le [Sat, 7 Aug 2021 03:34:44 +0000 (11:34 +0800)]
Remove dependency on MinIO

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Ife667fa1ea887e8ddd47f012c98ccd4d2807839f
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
3 years agoMerge "Update the license"
Huifeng Le [Sat, 7 Aug 2021 03:22:08 +0000 (03:22 +0000)]
Merge "Update the license"

3 years agoFix number of issues 89/4389/2
Ruoyu [Thu, 5 Aug 2021 02:58:52 +0000 (10:58 +0800)]
Fix number of issues

- Change dependency rules set for hub-device connection
- Fix 'type' issue in ipsec.lua
- First change the updown script to create concrete vti tunnels

Change-Id: Iab381c4768240cebcf5eaff5d221349304c7bbaa
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
3 years agoUpdate the license 86/4386/1
Huifeng Le [Wed, 4 Aug 2021 05:56:46 +0000 (13:56 +0800)]
Update the license

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I19b58e16ebcdc46c5a9a7b1cfc8b7c1502f49ab7

3 years agoFix go sync null pointer bug 69/4369/1
Le Yao [Fri, 9 Jul 2021 05:50:17 +0000 (05:50 +0000)]
Fix go sync null pointer bug

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I6e422a502be3ab10786cc72df9e363625d9c209f

3 years agoIntegrate the latest cnf and crd code change 53/4353/3
Le Yao [Wed, 23 Jun 2021 08:03:14 +0000 (08:03 +0000)]
Integrate the latest cnf and crd code change

Enhance the crd controller and sdewan cnf

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I05f4da221e923638520d89704d85acd029d9bf97

3 years agoMerge "Fix IpRange amd meta check"
Huifeng Le [Fri, 18 Jun 2021 01:33:20 +0000 (01:33 +0000)]
Merge "Fix IpRange amd meta check"

3 years agoFix IpRange amd meta check 46/4346/2
Le Yao [Tue, 15 Jun 2021 06:45:32 +0000 (06:45 +0000)]
Fix IpRange amd meta check

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Ib6be76a352ac63ae7cf18f572cf8b44ea0b50de3

3 years agoCLI support 45/4345/2
Huifeng Le [Tue, 15 Jun 2021 04:18:36 +0000 (12:18 +0800)]
CLI support

Add ewoctl to support configure overlay controller through command line.

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I2d9c9370f561e45a84c8f2bb72181ae8dfa32b32

3 years agoAdd CNF status query based on latest rsync 15/4315/2
Le Yao [Wed, 9 Jun 2021 03:00:15 +0000 (03:00 +0000)]
Add CNF status query based on latest rsync

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Idd63fab9c59311f96a84caf4ca645d16a477730b

3 years agoFix the entrypoint typo 96/4296/1
Le Yao [Mon, 24 May 2021 05:52:14 +0000 (05:52 +0000)]
Fix the entrypoint typo

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I4391bfa8a9bbd58fd687f489ba0ebb5b1e49be47

4 years agoAdd Overlay Controller into icn-sdwan repo 84/4184/1
Ruoyu [Tue, 23 Mar 2021 07:11:46 +0000 (15:11 +0800)]
Add Overlay Controller into icn-sdwan repo

*Add base code for Overlay Controller

Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
Change-Id: I4177c0b5c769ceb57399ab67acd7e1a56e7910da

4 years agoFix VTI support in cnf 53/4153/3
Ruoyu [Thu, 4 Feb 2021 17:29:56 +0000 (12:29 -0500)]
Fix VTI support in cnf

* Add base64 decoding for cert
* Repair public key authentication

Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
Change-Id: I6c68143f067731118b6e175fb3523d823f26b708
Signed-off-by: Ruoyu Ying <ruoyu.ying@intel.com>
4 years agoMerge "Implement Route CR controller"
Huifeng Le [Thu, 4 Feb 2021 02:16:16 +0000 (02:16 +0000)]
Merge "Implement Route CR controller"

4 years agoMerge "Implement Route RESTful API"
Huifeng Le [Thu, 4 Feb 2021 02:13:18 +0000 (02:13 +0000)]
Merge "Implement Route RESTful API"

4 years agoImplement Route CR controller 54/4054/3
Le Yao [Fri, 15 Jan 2021 07:32:23 +0000 (07:32 +0000)]
Implement Route CR controller

The Route CR controller handles the Route resource and call CNF Route
RESTful API to add/update/delete/get the route rule.

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I95871e1e95ccacf5790697d2e5105448f630aac2

4 years agoImplement Route RESTful API 53/4053/4
Le Yao [Thu, 14 Jan 2021 07:54:13 +0000 (07:54 +0000)]
Implement Route RESTful API

Offer the Route add/del/replace APIs for users

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I43c44f0de048e40a254cab370a872616ecd28ad2

4 years agoCNFStatus CRD Controller 52/4052/1
Huifeng Le [Thu, 14 Jan 2021 07:24:15 +0000 (15:24 +0800)]
CNFStatus CRD Controller

Add CNFStatus CRD controller to query CNF status periodically

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: I86a7fca4fd9248a22cadda30babde4346ea29bd8

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Ie5ed1f5d5ad87c367ad0a3342105515a44725558
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
4 years agoMerge "Add API for CNF's status information query"
Huifeng Le [Thu, 14 Jan 2021 05:31:45 +0000 (05:31 +0000)]
Merge "Add API for CNF's status information query"

4 years agoRegister service and applicaion CR to webhook 51/4051/1
Le Yao [Thu, 14 Jan 2021 04:56:11 +0000 (04:56 +0000)]
Register service and applicaion CR to webhook

Register new CRs to Webhook
Fix some typo errors

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I7a0556cf9877769b55f41598cfdca9df182b94d1

4 years agoAdd API for CNF's status information query 42/4042/3
Huifeng Le [Thu, 7 Jan 2021 06:48:45 +0000 (06:48 +0000)]
Add API for CNF's status information query

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Ieb564cfda4cabb8994a311f0fc6a47ecf337da29
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
4 years agoMerge "Add watch to cnf service controller"
Huifeng Le [Thu, 7 Jan 2021 03:03:08 +0000 (03:03 +0000)]
Merge "Add watch to cnf service controller"

4 years agoMerge "Add watch mechanism for pod to auto sync"
Huifeng Le [Thu, 7 Jan 2021 03:02:14 +0000 (03:02 +0000)]
Merge "Add watch mechanism for pod to auto sync"

4 years agoAdd watch to cnf service controller 41/4041/1
Le Yao [Wed, 6 Jan 2021 08:08:03 +0000 (08:08 +0000)]
Add watch to cnf service controller

Watch the CNF deployment status and sync

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I8cb9593e5da54bbd8662ca64ee246c107e3ecd4c

4 years agoEnhance CNF Application RESTful API 10/4010/2
Le Yao [Fri, 25 Dec 2020 08:35:59 +0000 (08:35 +0000)]
Enhance CNF Application RESTful API

Handle NULL cases and enhance the Application reconcile workload

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I783a2f47743b3bdf64165f25dcbdbcef889c9f8e

4 years agoAdd watch mechanism for pod to auto sync 93/3993/5
Le Yao [Tue, 15 Dec 2020 08:46:57 +0000 (08:46 +0000)]
Add watch mechanism for pod to auto sync

Sync status and reconcile when pod status change

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: Icad1caf52e43d25106753c02525e1eaceb449ba2

4 years agoMerge "Application CR implemention"
Huifeng Le [Tue, 15 Dec 2020 08:44:28 +0000 (08:44 +0000)]
Merge "Application CR implemention"

4 years agoImplement Application RESTful API 36/3936/4
Le Yao [Fri, 27 Nov 2020 08:25:29 +0000 (08:25 +0000)]
Implement Application RESTful API

The API is used to add ip rules for Application in CNF

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I82bc0a428cc1edb8d193d8ab0bf74fc52e0715c1

4 years agoMerge "Handle some un-covered errors"
Huifeng Le [Tue, 15 Dec 2020 08:01:58 +0000 (08:01 +0000)]
Merge "Handle some un-covered errors"

4 years agoMerge "Update the license to Apache License 2.0"
Huifeng Le [Tue, 15 Dec 2020 08:00:57 +0000 (08:00 +0000)]
Merge "Update the license to Apache License 2.0"

4 years agoMerge "Create Non-root user in CNF"
Huifeng Le [Fri, 11 Dec 2020 15:03:01 +0000 (15:03 +0000)]
Merge "Create Non-root user in CNF"

4 years agoApplication CR implemention 30/3930/5
Le Yao [Mon, 23 Nov 2020 06:15:36 +0000 (06:15 +0000)]
Application CR implemention

Implement Application CR and CR controller.
Call Application RESTful API to add rules for Application deployment.
Handle missing errors.

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I425f431bea20f372dc95cde1439259ad29e93773

4 years agoMerge "Add README for e2e test" release-v1.0 v1.0
Huifeng Le [Fri, 4 Dec 2020 08:51:52 +0000 (08:51 +0000)]
Merge "Add README for e2e test"

4 years agoAdd README for e2e test 69/3969/3
Ruoyu [Fri, 4 Dec 2020 11:20:31 +0000 (06:20 -0500)]
Add README for e2e test

Add README to e2e test folder

Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
Change-Id: I94482aaf3fc8051861edac6376fadf1e9bd1c865
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoMerge "Apply changes of installer.sh"
Huifeng Le [Fri, 4 Dec 2020 08:50:49 +0000 (08:50 +0000)]
Merge "Apply changes of installer.sh"

4 years agoApply changes of installer.sh 42/3942/3
Ruoyu [Tue, 1 Dec 2020 11:17:15 +0000 (06:17 -0500)]
Apply changes of installer.sh

Apply changes to installer.sh
to fix kubespray issue

Change-Id: Ib63e34f6f47b090802149e8ec3ba6e22dd390747
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoupdate readme 65/3965/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 04:38:15 +0000 (20:38 -0800)]
update readme

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: Ib43e852503addf0bf2af7154c78d6ff915304d27

4 years agoadding validation and end2end test results 64/3964/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 04:27:51 +0000 (20:27 -0800)]
adding validation and end2end test results

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I43bacb5a9769d6c45689f042371eee3e92dce6d5

4 years agoadding markdown fixes 63/3963/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 03:59:42 +0000 (19:59 -0800)]
adding markdown fixes

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I20ceb6ae8961344585be165602da2111907c65dc

4 years agoupdate readme 62/3962/1
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 03:51:00 +0000 (19:51 -0800)]
update readme

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I9b7e25ba79a6d340c328aed4607bd7acbea84499

4 years agoadding contributing documents 61/3961/2
Kuralamudhan Ramakrishnan [Thu, 3 Dec 2020 02:47:00 +0000 (18:47 -0800)]
adding contributing documents

Signed-off-by: Kuralamudhan R <kuralamudhan.ramakrishnan@intel.com>
Change-Id: I556ec1a67f3051cbfee2fbf39320a66a59c485ca

4 years agoUpdate the license to Apache License 2.0 56/3956/1
Le Yao [Wed, 2 Dec 2020 07:12:57 +0000 (07:12 +0000)]
Update the license to Apache License 2.0

Change to Apache License 2.0
Add copyright info

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I725ac47c82405429d5157f485ea7a229b6e63f2a

4 years agoHandle some un-covered errors 55/3955/1
Le Yao [Tue, 1 Dec 2020 08:44:15 +0000 (08:44 +0000)]
Handle some un-covered errors

Response error code and message to client

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I326ccb7411ba938f37da53e57b206c4800bca2e2

4 years agoCreate Non-root user in CNF 43/3943/1
Le Yao [Tue, 1 Dec 2020 05:40:01 +0000 (05:40 +0000)]
Create Non-root user in CNF

Create a non-root user wrt with privilege in CNF

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I083ef1fa6ea5853bb2e9eb0320c4b6a2d7034e5e

4 years agoMerge "Add api-server SNAT rule and enable forward"
Huifeng Le [Tue, 1 Dec 2020 02:45:10 +0000 (02:45 +0000)]
Merge "Add api-server SNAT rule and enable forward"

4 years agoFix helm issue from v2 to v3 35/3935/1
Le Yao [Fri, 27 Nov 2020 05:54:11 +0000 (05:54 +0000)]
Fix helm issue from v2 to v3

Update the scripts to use helm v3

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: I79496e1a92e00a9ce60ceac789e81f007dd208c0

4 years agoAdd api-server SNAT rule and enable forward 21/3921/1
Le Yao [Wed, 18 Nov 2020 06:28:22 +0000 (06:28 +0000)]
Add api-server SNAT rule and enable forward

Add the SNAT rule for api-server
Enable net.ipv4.ip_forward in CNF

Signed-off-by: Le Yao <le.yao@intel.com>
Change-Id: If31a6d8070d922a1f3e70bb94f85f349b3682379

4 years agoMerge "Add OpenAPI definition for Central Controller"
Huifeng Le [Fri, 30 Oct 2020 08:19:07 +0000 (08:19 +0000)]
Merge "Add OpenAPI definition for Central Controller"

4 years agoMerge "Update the firewall restart script"
Huifeng Le [Thu, 29 Oct 2020 06:41:34 +0000 (06:41 +0000)]
Merge "Update the firewall restart script"

4 years agoMerge "Service CR implemention"
Huifeng Le [Thu, 29 Oct 2020 06:37:19 +0000 (06:37 +0000)]
Merge "Service CR implemention"

4 years agoAdd OpenAPI definition for Central Controller 54/3854/1
Huifeng Le [Thu, 29 Oct 2020 06:29:22 +0000 (14:29 +0800)]
Add OpenAPI definition for Central Controller

Signed-off-by: Huifeng Le <huifeng.le@intel.com>
Change-Id: Id4cd1ff4e53b2435aa30a116495f88931983a053

4 years agoMerge "Implement Service RESTful API for hub"
Huifeng Le [Tue, 13 Oct 2020 02:18:11 +0000 (02:18 +0000)]
Merge "Implement Service RESTful API for hub"

4 years agoImplement Service RESTful API for hub 08/3708/5
Yao Le [Thu, 17 Sep 2020 04:25:47 +0000 (04:25 +0000)]
Implement Service RESTful API for hub

The API handles service POST, GET and DELETE call

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I2e75f1ae0d7a33b58c620f5637b36994fecc7381

4 years agoService CR implemention 89/3789/3
Yao Le [Sun, 27 Sep 2020 08:29:44 +0000 (08:29 +0000)]
Service CR implemention

When apply a Service CR, the controller will call service RESTful API
to configure iptables in CNF.

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: Ifb645c7d0712b9719a72c09623cba9f7fe778459

4 years agoUpdate the firewall restart script 11/3711/3
Yao Le [Mon, 21 Sep 2020 03:08:44 +0000 (03:08 +0000)]
Update the firewall restart script

Get the service IP and configuration
Config the service iptables NAT rules

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I74bd5236f4e56ea9d20e7eee6d4210e1ab04e0c0

4 years agoAdd license header 15/3715/2
Huifeng Le [Wed, 23 Sep 2020 08:31:57 +0000 (16:31 +0800)]
Add license header

Change-Id: I10c93df1a3be146a1c0e3c1eb717bdfa368d3e09
Signed-off-by: Huifeng Le <huifeng.le@intel.com>
4 years agoMinor updates for cnf 60/3660/7
Ruoyu [Wed, 5 Aug 2020 07:26:43 +0000 (15:26 +0800)]
Minor updates for cnf

* Update the configmap for cnf
* Change default values set for dpd
* Add length check for zone name
Change-Id: Ic0d8fcca36aca2f712354ed3c03ae0e7ae961b43
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoA service controller integrated with the watch 57/3657/2
Yao Le [Tue, 4 Aug 2020 03:16:11 +0000 (03:16 +0000)]
A service controller integrated with the watch

A watch to monitor the changes of the service cluster IP and restart the
firewall in CNF.
A controller to hold the watch function and monitor the potential CRs.

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I46e08e0403debd03e7f6bf7bf16507a0760382b7

4 years agoMinor changes for Istio configuration 40/3640/1
Ruoyu [Thu, 23 Jul 2020 01:48:01 +0000 (09:48 +0800)]
Minor changes for Istio configuration

*Apply minor changes for remote access to Istio ingress

Change-Id: I650e57041c317fcf91c674b4ed4fd93ef3cb30df

4 years agoMerge "Support e2e test thru CRs"
Huifeng Le [Mon, 20 Jul 2020 06:45:27 +0000 (06:45 +0000)]
Merge "Support e2e test thru CRs"

4 years agoSupport e2e test thru CRs 03/3603/19
Ruoyu [Sun, 28 Jun 2020 05:22:40 +0000 (13:22 +0800)]
Support e2e test thru CRs

* Installing the CNF and the controller with helm charts
* Applying the firewall and IPsec configs thru CRs
* Adding default policies to enable remote access to api server and Istio ingress

Issue-ID: ICN-390
Change-Id: I7c5ca03829ad1a7c3c90bc4edb5921ec60d4e530
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoUpdate sdewan readme file 05/3605/1
chengli3 [Wed, 1 Jul 2020 00:22:18 +0000 (00:22 +0000)]
Update sdewan readme file

Marking the cnf watchting task as finished

Signed-off-by: chengli3 <cheng1.li@intel.com>
Change-Id: I81451b4a5aea38d27f1969d9852fb96775eb5516

4 years agoApply the watch function to all controllers 77/3577/2
Yao Le [Wed, 17 Jun 2020 08:40:10 +0000 (08:40 +0000)]
Apply the watch function to all controllers

Add the necessray watch for all CRs and the associated CNFs

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: I52e53afbdcc4034820a6db90c6dd2502b8e31692

4 years agoMerge "Add watch for CR and CNF"
Cheng Li [Wed, 17 Jun 2020 05:43:48 +0000 (05:43 +0000)]
Merge "Add watch for CR and CNF"

4 years agoMerge "Add CRD for IpsecSite"
Cheng Li [Wed, 17 Jun 2020 02:53:22 +0000 (02:53 +0000)]
Merge "Add CRD for IpsecSite"

4 years agoAdd CRD for IpsecSite 75/3575/8
root [Tue, 16 Jun 2020 09:09:49 +0000 (09:09 +0000)]
Add CRD for IpsecSite

 * Add changes for another IPSec crd: IpsecSite

Issue-ID: ICN-289
Change-Id: I9c76c28ec22640b0089e0bc097a316af68b6fd19
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoUpgrade k8s version in e2e script 48/3548/2
Ruoyu [Thu, 4 Jun 2020 13:23:02 +0000 (21:23 +0800)]
Upgrade k8s version in e2e script

Issue-ID: ICN-314
Signed-off-by: Ruoyu<ruoyu.ying@intel.com>
Change-Id: I0878e5451a05ce0ffad2a99bd53247c1c670a93a

4 years agoAdd watch for CR and CNF 44/3544/3
Yao Le [Thu, 4 Jun 2020 16:13:27 +0000 (00:13 +0800)]
Add watch for CR and CNF

Watch the CNF status and push the related CR requests to queue.

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: Id3adaf68b860efefdb00ffe5620aef11b9aa787f

4 years agoPrevent updating CNF and CR sdewanpuporse label 68/3568/4
chengli3 [Fri, 12 Jun 2020 08:33:30 +0000 (08:33 +0000)]
Prevent updating CNF and CR sdewanpuporse label

In sdewan, we use label 'sdewanpurpose' to identify a cnf and to match
with CRs. Updating cnf sdewanpurpose label value means that deleting old
cnf and creating a new cnf. But K8s can only receive an "UPDATE" event,
reconcile can only get the current info of the CNF, no previous label
value. So it can't remove the old rules.
This patch is to prevent updating CNF and CR sdewanpurpose label for
simplify.

Signed-off-by: chengli3 <cheng1.li@intel.com>
Change-Id: I75b7d400981f3103b02c9d73f68d8b62db7da899

4 years agoMerge "Add CRD for IpsecHost"
Cheng Li [Mon, 15 Jun 2020 07:24:15 +0000 (07:24 +0000)]
Merge "Add CRD for IpsecHost"

4 years agoAdd CRD for IpsecHost 53/3553/8
Ruoyu [Tue, 9 Jun 2020 00:37:18 +0000 (08:37 +0800)]
Add CRD for IpsecHost

* Contains changes on IpsecHost
  - Add CR for IpsecHost
  - Add support for 'mark' in /etc/init.d/ipsec
  - Change the 'Site' to 'Remote' in rest api calls
Issue-ID: ICN-289
Change-Id: I1f07f1f8f5fdf62f082829fdedf09a7504414611
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>
4 years agoMerge "Lookup pod by owner instead of label"
Cheng Li [Fri, 12 Jun 2020 02:23:45 +0000 (02:23 +0000)]
Merge "Lookup pod by owner instead of label"

4 years agoMerge "Add CRD for IPSec Proposal"
Cheng Li [Tue, 9 Jun 2020 07:47:34 +0000 (07:47 +0000)]
Merge "Add CRD for IPSec Proposal"

4 years agoAdd missing errors messages 27/3527/4
Yao Le [Fri, 29 May 2020 07:01:37 +0000 (07:01 +0000)]
Add missing errors messages

Report the 'Pod no IP' issues

Signed-off-by: Yao Le <le.yao@intel.com>
Change-Id: Ieaf2997ca0ed1bd1f167d9d5f8c77cb43ab3fb45

4 years agoLookup pod by owner instead of label 52/3552/1
chengli3 [Mon, 8 Jun 2020 03:10:21 +0000 (03:10 +0000)]
Lookup pod by owner instead of label

Currently, CNF is represented by deployment. It means that one CNF is
one deployment with special label name `SdewanPurpose`. We use
"Deployment" + "label" to identify a CNF.
To apply rules for CNF, we first need to find out the pods and then
extract the its IP address. It makes more sense to find pod by its owner
deployment/replicaset, than using the label match. Because the pod label
may not be the same with the deployment.

Signed-off-by: chengli3 <cheng1.li@intel.com>
Change-Id: I4174e502c7d50d48f47d61622380e57922b5cf32

4 years agoAdd CRD for IPSec Proposal 36/3536/6
Ruoyu [Tue, 2 Jun 2020 01:03:22 +0000 (09:03 +0800)]
Add CRD for IPSec Proposal

*Contains changes for IPSec Proposal

Issue-ID: ICN-289
Change-Id: I31e9effe6d132b9fa82f9ed9bd478255579cc476
Signed-off-by: Ruoyu <ruoyu.ying@intel.com>