Fix connectionHealthCheck

connectionHealthCheck in submariner CR is a nested field but is being added as a variable. This means it is ignored and the field isn't set correctly in gateway pods. Signed-off-by: Vishal Thapar <5137689+vthapar@users.noreply.github.com>
Add RBAC permission endpointslices/restricted in broker roles
2026-09-20 21:30:35 +00:00 · 2021-10-27 12:36:06 -04:00 · 2021-10-26 08:12:41 -04:00 · 2021-10-25 09:12:47 -04:00 · 2021-10-25 09:12:47 -04:00 · 2021-10-25 09:12:47 -04:00
8 changed files with 37 additions and 15 deletions
@@ -5,8 +5,8 @@ on:
  pull_request:

 jobs:
-  target_devel:
-    name: PR targets devel
+  target_branch:
+    name: PR targets branch
    runs-on: ubuntu-latest
    steps:
      - name: Check that the PR targets devel
@@ -21,7 +21,7 @@ override DEPLOY_ARGS += $(CLUSTER_SETTINGS_FLAG) --deploytool helm
 export DEPLOY_ARGS
 GH_URL=https://submariner-io.github.io/submariner-charts/charts
 CHARTS_DIR=charts
-CHARTS_VERSION=0.7.0
+CHARTS_VERSION=0.10.1
 HELM_DOCS_VERSION=0.15.0
 REPO_URL=$(shell git config remote.origin.url)

@@ -16,7 +16,7 @@ rules:
  resources: ["*"]
  verbs: ["create", "get", "list", "watch", "patch", "update", "delete"]
 - apiGroups: ["discovery.k8s.io"]
-  resources: ["endpointslices"]
+  resources: ["endpointslices", "endpointslices/restricted"]
  verbs: ["create", "get", "list", "watch","patch", "update", "delete"]
 - apiGroups: ["multicluster.x-k8s.io"]
  resources: ["*"]
@@ -1,8 +1,8 @@
 ---
 name: submariner-operator
-version: 0.7.0
+version: 0.10.1
 apiVersion: v2
-appVersion: 0.7.0
+appVersion: 0.10.1
 description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters
 keywords:
 home: https://submariner-io.github.io/
@@ -1,6 +1,6 @@
 # submariner-operator

-![Version: 0.7.0](https://img.shields.io/badge/Version-0.7.0-informational?style=flat-square) ![AppVersion: 0.7.0](https://img.shields.io/badge/AppVersion-0.7.0-informational?style=flat-square)
+![Version: 0.10.1](https://img.shields.io/badge/Version-0.10.1-informational?style=flat-square) ![AppVersion: 0.10.1](https://img.shields.io/badge/AppVersion-0.10.1-informational?style=flat-square)

 Submariner enables direct networking between Pods and Services in different Kubernetes clusters

@@ -27,8 +27,9 @@ Submariner enables direct networking between Pods and Services in different Kube
 | broker.server | string | `"example.k8s.apiserver"` |  |
 | broker.token | string | `"test"` |  |
 | gateway.image.repository | string | `"quay.io/submariner/submariner-gateway"` |  |
-| gateway.image.tag | string | `"0.7.0"` |  |
+| gateway.image.tag | string | `"0.10.1"` |  |
 | ipsec.debug | bool | `false` |  |
+| ipsec.forceUDPEncaps | bool | `false` |  |
 | ipsec.ikePort | int | `500` |  |
 | ipsec.natPort | int | `4500` |  |
 | ipsec.psk | string | `""` |  |
@@ -38,7 +39,7 @@ Submariner enables direct networking between Pods and Services in different Kube
 | operator.affinity | object | `{}` |  |
 | operator.image.pullPolicy | string | `"IfNotPresent"` |  |
 | operator.image.repository | string | `"quay.io/submariner/submariner-operator"` |  |
-| operator.image.tag | string | `"0.7.0"` |  |
+| operator.image.tag | string | `"0.10.1"` |  |
 | operator.resources | object | `{}` |  |
 | operator.tolerations | list | `[]` |  |
 | rbac.create | bool | `true` |  |
@@ -58,10 +59,12 @@ Submariner enables direct networking between Pods and Services in different Kube
 | submariner.clusterCidr | string | `""` |  |
 | submariner.clusterId | string | `""` |  |
 | submariner.colorCodes | string | `"blue"` |  |
+| submariner.coreDNSCustomConfig | object | `{}` |  |
 | submariner.debug | bool | `false` |  |
 | submariner.globalCidr | string | `""` |  |
+| submariner.healthcheckEnabled | bool | `true` |  |
 | submariner.images.repository | string | `"quay.io/submariner"` |  |
-| submariner.images.tag | string | `"0.7.0"` |  |
+| submariner.images.tag | string | `"0.10.1"` |  |
 | submariner.natEnabled | bool | `false` |  |
 | submariner.serviceCidr | string | `""` |  |
 | submariner.serviceDiscovery | bool | `true` |  |
@@ -13,7 +13,7 @@ questions:
    type: string
    label: Submariner Operator Image Repository
  - variable: operator.image.tag
-    default: "0.7.0"
+    default: "0.10.1"
    description: "Submariner Operator Image Tag"
    type: string
    label: Submariner Operator Image Tag
@@ -31,7 +31,7 @@ questions:
    type: string
    label: Submariner Repository
  - variable: submariner.images.tag
-    default: "0.7.0"
+    default: "0.10.1"
    description: "Submariner Images Tag (shared for all non-operator images)"
    type: string
    label: Submariner Images Tag
@@ -136,3 +136,9 @@ questions:
  group: "Advanced Configuration"
  description: "Cable driver implementation"
  label: "Cable Driver"
+- variable: submariner.healthcheckEnabled
+  type: boolean
+  default: true
+  group: "Advanced Configuration"
+  description: "Disable Healthcheck"
+  label: "Healthcheck Disabled"
@@ -10,6 +10,7 @@ spec:
  brokerK8sCA: {{ .Values.broker.ca }}
  brokerK8sRemoteNamespace: {{ .Values.broker.namespace }}
  ceIPSecDebug: {{ .Values.ipsec.debug }}
+  ceIPSecForceUDPEncaps: {{ .Values.ipsec.forceUDPEncaps }}
  ceIPSecIKEPort: {{ .Values.ipsec.ikePort }}
  ceIPSecNATTPort: {{ .Values.ipsec.natPort }}
  ceIPSecPSK: {{ .Values.ipsec.psk }}
@@ -25,3 +26,12 @@ spec:
  globalCIDR: "{{ .Values.submariner.globalCidr }}"
  serviceDiscoveryEnabled: {{ .Values.submariner.serviceDiscovery }}
  cableDriver: {{ .Values.submariner.cableDriver }}
+  connectionHealthCheck:
+    enabled: {{ .Values.submariner.healthcheckEnabled }}
+    intervalSeconds: 1
+    maxPacketLossCount: 5
+{{- with .Values.submariner.coreDNSCustomConfig }}
+  coreDNSCustomConfig:
+    configmapName: .configmapName
+    namespace: .namespace
+{{- end }}
@@ -10,9 +10,11 @@ submariner:
  debug: false
  serviceDiscovery: true
  cableDriver: "libreswan"
+  healthcheckEnabled: true
+  coreDNSCustomConfig: {}
  images:
    repository: quay.io/submariner
-    tag: "0.7.0"
+    tag: "0.10.1"
 broker:
  server: example.k8s.apiserver
  token: test
@@ -25,6 +27,7 @@ rbac:
 ipsec:
  psk: ""
  debug: false
+  forceUDPEncaps: false
  ikePort: 500
  natPort: 4500
 leadership:
@@ -34,7 +37,7 @@ leadership:
 operator:
  image:
    repository: quay.io/submariner/submariner-operator
-    tag: "0.7.0"
+    tag: "0.10.1"
    pullPolicy: IfNotPresent
  resources: {}
  tolerations: []
@@ -42,7 +45,7 @@ operator:
 gateway:
  image:
    repository: quay.io/submariner/submariner-gateway
-    tag: "0.7.0"
+    tag: "0.10.1"
 serviceAccounts:
  operator:
    create: true
Author	SHA1	Message	Date
Vishal ThaparandDaniel Farrell	220ccc34f5	Fix connectionHealthCheck connectionHealthCheck in submariner CR is a nested field but is being added as a variable. This means it is ignored and the field isn't set correctly in gateway pods. Signed-off-by: Vishal Thapar <5137689+vthapar@users.noreply.github.com>	2021-10-27 12:36:06 -04:00
Aswin SurayanarayananandThomas Pantelis	c3a885fec9	Add RBAC permission endpointslices/restricted in broker roles Fixes : github.com/submariner-io/lighthouse/issues#627 Signed-off-by: Aswin Surayanarayanan <asuryana@redhat.com>	2021-10-26 08:12:41 -04:00
Víctor Felipe Godoy Hernández Thomas Pantelis Sridhar Gaddam	17f4fecfd9	Update submariner-operator/questions.yml Co-authored-by: Sridhar Gaddam <sgaddam@redhat.com> Signed-off-by: Victor Godoy Hernández <vigohe@gmail.com>	2021-10-25 09:12:47 -04:00
Victor Godoy HernándezandThomas Pantelis	9ee272bec8	Update Readme.md Signed-off-by: Victor Godoy Hernández <vigohe@gmail.com>	2021-10-25 09:12:47 -04:00
Victor Godoy HernándezandThomas Pantelis	9347e8f345	Add ceIPSecForceUDPEncaps & coreDNSCustomConfig variables Signed-off-by: Victor Godoy Hernández <vigohe@gmail.com>	2021-10-25 09:12:47 -04:00
Victor Godoy HernándezandThomas Pantelis	916f255461	Add enable/disable connectionHealthCheck Signed-off-by: Victor Godoy Hernández <vigohe@gmail.com>	2021-10-25 09:12:47 -04:00
Victor Godoy HernándezandThomas Pantelis	756daf344e	Bump up to 0.10.1 Signed-off-by: Victor Godoy Hernández <vigohe@gmail.com>	2021-10-25 09:12:47 -04:00
Mike KolesnikandThomas Pantelis	839d20f972	Rename job so it won't shard on stable branches Right now auto release logic updates `devel` to the stable branch name when creating stable branches. This leads to this job "sharding" into multiple jobs, and messes up branch protections. To keep things simple, the main job name will remain the same so that there's no "PR targets X" and "PR targets Y" jobs, just the one "PR targets branch" job Signed-off-by: Mike Kolesnik <mkolesni@redhat.com>	2021-10-20 11:18:35 -04:00