Skip to content

Commit 87615f5

Browse files
smasset-orangesmira
smasset-orange
authored and
smira
committed
feat: implement network policies with Flannel CNI
Align flannel ClusterRole with upstream chart template (cf. https://github.com/flannel-io/flannel/blob/master/chart/kube-flannel/templates/rbac.yaml) Add boolean in cluster flannel CNI config to deploy extra resources to handle network policies. Inspired by flannel Helm chart handling of netpol.enabled value (cf. https://github.com/flannel-io/flannel/blob/master/Documentation/netpol.md) Signed-off-by: Sébastien Masset <86793256+smasset-orange@users.noreply.github.com> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
1 parent 6995bc1 commit 87615f5

File tree

70 files changed

+809
-245
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

70 files changed

+809
-245
lines changed

‎.github/workflows/ci.yaml‎

Lines changed: 53 additions & 44 deletions
Large diffs are not rendered by default.

‎.github/workflows/grype-scan-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-airgapped-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-aws-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-aws-nvidia-nonfree-lts-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-aws-nvidia-nonfree-production-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-aws-nvidia-oss-lts-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-aws-nvidia-oss-production-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-cilium-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

‎.github/workflows/integration-conformance-cron.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
22
#
3-
# Generated on 2025-12-18T09:21:29Z by kres 26be706.
3+
# Generated on 2026-02-10T11:45:22Z by kres f3ab59e.
44

55
concurrency:
66
group: ${{ github.head_ref || github.run_id }}
@@ -46,7 +46,7 @@ jobs:
4646
git fetch --prune --unshallow
4747
- name: Set up Docker Buildx
4848
id: setup-buildx
49-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # version: v3.11.1
49+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # version: v3.12.0
5050
with:
5151
driver: remote
5252
endpoint: tcp://buildkit-amd64.ci.svc.cluster.local:1234

0 commit comments

Comments
 (0)