Bump to 0.11.1

Signed-off-by: Stephen Kitt <skitt@redhat.com>
Update K8s in E2E, EOL 1.19 and add 1.23
2026-09-20 22:40:34 +00:00 · 2022-01-26 08:45:13 -05:00 · 2022-01-26 08:44:26 -05:00 · 2022-01-26 08:44:26 -05:00 · 2022-01-26 08:44:26 -05:00 · 2022-01-26 08:44:26 -05:00
12 changed files with 1272 additions and 843 deletions
@@ -16,12 +16,12 @@ jobs:
      matrix:
        cable_driver: ['libreswan', 'wireguard', 'vxlan']
        globalnet: ['', 'globalnet']
-        k8s_version: ['1.17']
+        k8s_version: ['1.23']
        lighthouse: ['', 'lighthouse']
        include:
-          - k8s_version: '1.18'
-          - k8s_version: '1.19'
          - k8s_version: '1.20'
+          - k8s_version: '1.21'
+          - k8s_version: '1.22'
    steps:
      - name: Check out the repository
        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f
@@ -1 +1,3 @@
-* @mangelajo @Oats87 @skitt @sridhargaddam @tpantelis
+# Auto-generated, do not edit; see CODEOWNERS.in
+* @Oats87 @skitt @sridhargaddam @tpantelis
+*.md @dfarrell07 @Oats87 @skitt @sridhargaddam @tpantelis
@@ -0,0 +1,5 @@
+@dfarrell07 *.md
+@Oats87 *
+@skitt *
+@sridhargaddam *
+@tpantelis *
@@ -21,7 +21,7 @@ override DEPLOY_ARGS += $(CLUSTER_SETTINGS_FLAG) --deploytool helm
 export DEPLOY_ARGS
 GH_URL=https://submariner-io.github.io/submariner-charts/charts
 CHARTS_DIR=charts
-CHARTS_VERSION=0.11.0
+CHARTS_VERSION=0.11.1
 HELM_DOCS_VERSION=0.15.0
 REPO_URL=$(shell git config remote.origin.url)

@@ -1,97 +1,333 @@
-apiVersion: apiextensions.k8s.io/v1beta1
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
  name: clusters.submariner.io
 spec:
  group: submariner.io
-  version: v1
  names:
    kind: Cluster
+    listKind: ClusterList
    plural: clusters
+    singular: cluster
  scope: Namespaced
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            properties:
+              cluster_cidr:
+                items:
+                  type: string
+                type: array
+              cluster_id:
+                type: string
+              color_codes:
+                items:
+                  type: string
+                type: array
+              global_cidr:
+                items:
+                  type: string
+                type: array
+              service_cidr:
+                items:
+                  type: string
+                type: array
+            required:
+            - cluster_cidr
+            - cluster_id
+            - color_codes
+            - global_cidr
+            - service_cidr
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
 ---
-apiVersion: apiextensions.k8s.io/v1beta1
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
  name: endpoints.submariner.io
 spec:
  group: submariner.io
-  version: v1
  names:
    kind: Endpoint
+    listKind: EndpointList
    plural: endpoints
+    singular: endpoint
  scope: Namespaced
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            properties:
+              backend:
+                type: string
+              backend_config:
+                additionalProperties:
+                  type: string
+                type: object
+              cable_name:
+                type: string
+              cluster_id:
+                type: string
+              healthCheckIP:
+                type: string
+              hostname:
+                type: string
+              nat_enabled:
+                type: boolean
+              private_ip:
+                type: string
+              public_ip:
+                type: string
+              subnets:
+                items:
+                  type: string
+                type: array
+            required:
+            - backend
+            - cable_name
+            - cluster_id
+            - hostname
+            - nat_enabled
+            - private_ip
+            - public_ip
+            - subnets
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
 ---
-apiVersion: apiextensions.k8s.io/v1beta1
+apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
  name: gateways.submariner.io
 spec:
  group: submariner.io
-  version: v1
  names:
    kind: Gateway
+    listKind: GatewayList
    plural: gateways
+    singular: gateway
  scope: Namespaced
-  additionalPrinterColumns:
-    - name: ha-status
+  versions:
+  - additionalPrinterColumns:
+    - description: High availability status of the Gateway
+      jsonPath: .status.haStatus
+      name: HA Status
      type: string
-      description: High Availability Status of the Gateway
-      JSONPath: .status.haStatus
---
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: multiclusterservices.lighthouse.submariner.io
-spec:
-  group: lighthouse.submariner.io
-  version: v1
-  names:
-    kind: MultiClusterService
-    plural: multiclusterservices
-    singular: multiclusterservice
-  scope: Namespaced
-  validation:
-    openAPIV3Schema:
-      properties:
-        spec:
-          properties:
-            clusterServiceInfo:
-              properties:
-                clusterID:
-                  type: "string"
-                clusterDomain:
-                  type: "string"
-                serviceIP:
-                  type: "string"
-                port:
-                  type: "integer"
---
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: serviceexports.lighthouse.submariner.io
-spec:
-  group: lighthouse.submariner.io
-  version: v2alpha1
-  names:
-    kind: ServiceExport
-    plural: serviceexports
-    singular: serviceexport
-  scope: Namespaced
---
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: serviceimports.lighthouse.submariner.io
-spec:
-  group: lighthouse.submariner.io
-  version: v2alpha1
-  names:
-    kind: ServiceImport
-    plural: serviceimports
-    singular: serviceimport
-  scope: Namespaced
+    name: v1
+    schema:
+      openAPIV3Schema:
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          status:
+            properties:
+              connections:
+                items:
+                  properties:
+                    endpoint:
+                      properties:
+                        backend:
+                          type: string
+                        backend_config:
+                          additionalProperties:
+                            type: string
+                          type: object
+                        cable_name:
+                          type: string
+                        cluster_id:
+                          type: string
+                        healthCheckIP:
+                          type: string
+                        hostname:
+                          type: string
+                        nat_enabled:
+                          type: boolean
+                        private_ip:
+                          type: string
+                        public_ip:
+                          type: string
+                        subnets:
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - backend
+                      - cable_name
+                      - cluster_id
+                      - hostname
+                      - nat_enabled
+                      - private_ip
+                      - public_ip
+                      - subnets
+                      type: object
+                    latency:
+                      description: LatencySpec describes the round trip time information
+                        in nanoseconds for a packet between the gateway pods of two
+                        clusters.
+                      properties:
+                        averageRTT:
+                          format: int64
+                          type: integer
+                        lastRTT:
+                          description: TODO This shall be deleted once the operator
+                            is using the latest. Using Optional to avoid validation
+                            errors when this field is not used.
+                          format: int64
+                          type: integer
+                        maxRTT:
+                          format: int64
+                          type: integer
+                        minRTT:
+                          format: int64
+                          type: integer
+                        stddevRTT:
+                          format: int64
+                          type: integer
+                      type: object
+                    latencyRTT:
+                      description: LatencySpec describes the round trip time information
+                        for a packet between the gateway pods of two clusters.
+                      properties:
+                        average:
+                          type: string
+                        last:
+                          type: string
+                        max:
+                          type: string
+                        min:
+                          type: string
+                        stdDev:
+                          type: string
+                      type: object
+                    status:
+                      type: string
+                    statusMessage:
+                      type: string
+                  required:
+                  - endpoint
+                  - status
+                  - statusMessage
+                  type: object
+                type: array
+              haStatus:
+                type: string
+              localEndpoint:
+                properties:
+                  backend:
+                    type: string
+                  backend_config:
+                    additionalProperties:
+                      type: string
+                    type: object
+                  cable_name:
+                    type: string
+                  cluster_id:
+                    type: string
+                  healthCheckIP:
+                    type: string
+                  hostname:
+                    type: string
+                  nat_enabled:
+                    type: boolean
+                  private_ip:
+                    type: string
+                  public_ip:
+                    type: string
+                  subnets:
+                    items:
+                      type: string
+                    type: array
+                required:
+                - backend
+                - cable_name
+                - cluster_id
+                - hostname
+                - nat_enabled
+                - private_ip
+                - public_ip
+                - subnets
+                type: object
+              statusFailure:
+                type: string
+              version:
+                type: string
+            required:
+            - connections
+            - haStatus
+            - localEndpoint
+            - statusFailure
+            - version
+            type: object
+        required:
+        - status
+        type: object
+    served: true
+    storage: true
+    subresources: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -1,8 +1,8 @@
 ---
 name: submariner-operator
-version: 0.11.0
+version: 0.11.1
 apiVersion: v2
-appVersion: 0.11.0
+appVersion: 0.11.1
 description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters
 keywords:
 home: https://submariner-io.github.io/
@@ -1,6 +1,6 @@
 # submariner-operator

-![Version: 0.11.0](https://img.shields.io/badge/Version-0.11.0-informational?style=flat-square) ![AppVersion: 0.11.0](https://img.shields.io/badge/AppVersion-0.11.0-informational?style=flat-square)
+![Version: 0.11.1](https://img.shields.io/badge/Version-0.11.1-informational?style=flat-square) ![AppVersion: 0.11.1](https://img.shields.io/badge/AppVersion-0.11.1-informational?style=flat-square)

 Submariner enables direct networking between Pods and Services in different Kubernetes clusters

@@ -27,7 +27,7 @@ Submariner enables direct networking between Pods and Services in different Kube
 | broker.server | string | `"example.k8s.apiserver"` |  |
 | broker.token | string | `"test"` |  |
 | gateway.image.repository | string | `"quay.io/submariner/submariner-gateway"` |  |
-| gateway.image.tag | string | `"0.11.0"` |  |
+| gateway.image.tag | string | `"0.11.1"` |  |
 | ipsec.debug | bool | `false` |  |
 | ipsec.forceUDPEncaps | bool | `false` |  |
 | ipsec.ikePort | int | `500` |  |
@@ -39,7 +39,7 @@ Submariner enables direct networking between Pods and Services in different Kube
 | operator.affinity | object | `{}` |  |
 | operator.image.pullPolicy | string | `"IfNotPresent"` |  |
 | operator.image.repository | string | `"quay.io/submariner/submariner-operator"` |  |
-| operator.image.tag | string | `"0.11.0"` |  |
+| operator.image.tag | string | `"0.11.1"` |  |
 | operator.resources | object | `{}` |  |
 | operator.tolerations | list | `[]` |  |
 | rbac.create | bool | `true` |  |
@@ -64,7 +64,7 @@ Submariner enables direct networking between Pods and Services in different Kube
 | submariner.globalCidr | string | `""` |  |
 | submariner.healthcheckEnabled | bool | `true` |  |
 | submariner.images.repository | string | `"quay.io/submariner"` |  |
-| submariner.images.tag | string | `"0.11.0"` |  |
+| submariner.images.tag | string | `"0.11.1"` |  |
 | submariner.natEnabled | bool | `false` |  |
 | submariner.serviceCidr | string | `""` |  |
 | submariner.serviceDiscovery | bool | `true` |  |
@@ -13,7 +13,7 @@ questions:
    type: string
    label: Submariner Operator Image Repository
  - variable: operator.image.tag
-    default: "0.11.0"
+    default: "0.11.1"
    description: "Submariner Operator Image Tag"
    type: string
    label: Submariner Operator Image Tag
@@ -31,7 +31,7 @@ questions:
    type: string
    label: Submariner Repository
  - variable: submariner.images.tag
-    default: "0.11.0"
+    default: "0.11.1"
    description: "Submariner Images Tag (shared for all non-operator images)"
    type: string
    label: Submariner Images Tag
@@ -439,6 +439,21 @@ rules:
    verbs:
      - get
      - list
+  - apiGroups:
+      - ""
+    resources:
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - monitoring.coreos.com
+    resources:
+      - servicemonitors
+    verbs:
+      - get
+      - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -459,6 +474,29 @@ roleRef:
  name: {{ template "submariner.fullname" . }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: submariner-metrics-reader
+  namespace: {{ .Release.Namespace }}
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "services", "endpoints"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: read-submariner-metrics
+subjects:
+  - kind: ServiceAccount
+    name: prometheus-k8s
+    namespace: openshift-monitoring
+roleRef:
+  kind: Role
+  name: submariner-metrics-reader
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  name: {{ template "submariner.fullname" . }}:gateway
@@ -640,14 +678,25 @@ rules:
      - ""
    resources:
      - pods
-      - services
      - namespaces
      - nodes
+      - endpoints
    verbs:
      - get
      - list
      - watch
      - update
+  - apiGroups:
+      - ""
+    resources:
+      - services
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+      - update
+      - delete
  - apiGroups:
      - submariner.io
    resources:
@@ -688,6 +737,15 @@ rules:
      - get
      - list
      - watch
+  - apiGroups:
+      - network.openshift.io
+    resources:
+      - service/externalips
+    verbs:
+      - create
+      - get
+      - list
+      - delete
 ---
 {{- end -}}
 apiVersion: rbac.authorization.k8s.io/v1
@@ -9,6 +9,7 @@ spec:
  brokerK8sApiServerToken: {{ .Values.broker.token }}
  brokerK8sCA: {{ .Values.broker.ca }}
  brokerK8sRemoteNamespace: {{ .Values.broker.namespace }}
+  brokerK8sInsecure: {{ .Values.broker.insecure }}
  ceIPSecDebug: {{ .Values.ipsec.debug }}
  ceIPSecForceUDPEncaps: {{ .Values.ipsec.forceUDPEncaps }}
  ceIPSecIKEPort: {{ .Values.ipsec.ikePort }}
@@ -32,6 +33,6 @@ spec:
    maxPacketLossCount: 5
 {{- with .Values.submariner.coreDNSCustomConfig }}
  coreDNSCustomConfig:
-    configmapName: .configmapName
-    namespace: .namespace
+    configmapName: {{ .configmapName }}
+    namespace: {{ .namespace }}
 {{- end }}
@@ -14,7 +14,7 @@ submariner:
  coreDNSCustomConfig: {}
  images:
    repository: quay.io/submariner
-    tag: "0.11.0"
+    tag: "0.11.1"
 broker:
  server: example.k8s.apiserver
  token: test
@@ -37,7 +37,7 @@ leadership:
 operator:
  image:
    repository: quay.io/submariner/submariner-operator
-    tag: "0.11.0"
+    tag: "0.11.1"
    pullPolicy: IfNotPresent
  resources: {}
  tolerations: []
@@ -45,7 +45,7 @@ operator:
 gateway:
  image:
    repository: quay.io/submariner/submariner-gateway
-    tag: "0.11.0"
+    tag: "0.11.1"
 serviceAccounts:
  operator:
    create: true
Author	SHA1	Message	Date
Stephen KittandThomas Pantelis	5ab8347f4f	Bump to 0.11.1 Signed-off-by: Stephen Kitt <skitt@redhat.com>	2022-01-26 08:45:13 -05:00
Daniel FarrellandThomas Pantelis	3dd6eeb961	Update K8s in E2E, EOL 1.19 and add 1.23 Update the versions of Kubernetes tested in the E2E CI. Add 1.23 as the new default for most tests, remove 1.19 as it is now EOL. Signed-off-by: Daniel Farrell <dfarrell@redhat.com> (cherry picked from commit `b6590df91b`)	2022-01-26 08:44:26 -05:00
Sridhar GaddamandThomas Pantelis	85bc80cbe4	Configure RBAC for Globalnet pods on OCP deployments Globalnet controller now uses internal services with external-ips to support exported services. On OCP Clusters, we require an explicit RBAC to create services with external-ips, this PR includes the necessary RBAC for Globalnet pods. Related to: https://github.com/submariner-io/submariner/issues/1166 Signed-Off-by: Sridhar Gaddam <sgaddam@redhat.com> (cherry picked from commit `bf2c41115b`)	2022-01-26 08:44:26 -05:00
NegashandThomas Pantelis	cdc0e0e0c5	Fix coreDNSCustomConfig values Signed-off-by: Negash <i@negash.ru> (cherry picked from commit `9ba0123e72`)	2022-01-26 08:44:26 -05:00
Sridhar GaddamandThomas Pantelis	6250b283fa	Globalnet include ClusterRole for services As part of Globalnet enhancement where kubeproxy dependency is removed, the Globalnet Pod will now create internal services for every exported service in the respective namespace where the original service resides. This PR adds the necessary clusterRole to allow Globalnet pod to create/delete such internal services. Related to: https://github.com/submariner-io/submariner/issues/1166 Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com> (cherry picked from commit `b3a5e40a5a`)	2022-01-26 08:44:26 -05:00
Stephen KittandThomas Pantelis	ed33b07bd9	Add roles and privileges required for monitoring This replicates the RBAC changes applied to the operator in https://github.com/submariner-io/submariner-operator/pull/1416 Fixes: #191 Signed-off-by: Stephen Kitt <skitt@redhat.com> (cherry picked from commit `9358c86eb5`)	2022-01-26 08:44:26 -05:00
Masaki KimuraandThomas Pantelis	f1410811d7	Allow submariner-globalnet role to handle endpoints Signed-off-by: Masaki Kimura <masaki.kimura@hitachivantara.com> (cherry picked from commit `5da180d44f`)	2022-01-26 08:44:26 -05:00
Stephen KittandThomas Pantelis	648dbeacb3	Add dfarrell07 as *.md code owner See <https://github.com/submariner-io/submariner/issues/1622>. Signed-off-by: Stephen Kitt <skitt@redhat.com> (cherry picked from commit `7068abafc8`)	2022-01-26 08:44:26 -05:00
Stephen KittandThomas Pantelis	2a4213f768	Update all CRDs to v1 CRDs ... and drop the obsolete Lighthouse CRDs. Fixes: #186 Signed-off-by: Stephen Kitt <skitt@redhat.com> (cherry picked from commit `2cfbd5c394`)	2022-01-26 08:44:26 -05:00
Stephen KittandThomas Pantelis	0f97bc9c11	Pass the broker.insecure flag to the CR Fixes: #185 Signed-off-by: Stephen Kitt <skitt@redhat.com> (cherry picked from commit `42a2af008a`)	2022-01-26 08:44:26 -05:00
Stephen KittandThomas Pantelis	36945da91c	Remove mangelajo from CODEOWNERS ... with his approval. Signed-off-by: Stephen Kitt <skitt@redhat.com> (cherry picked from commit `1fbd3da4ae`)	2022-01-26 08:44:26 -05:00
Stephen KittandThomas Pantelis	dfc0280658	Update K8s versions: drop 1.17/1.18, add 1.21/1.22 1.17 and 1.18 have reached EOL. Signed-off-by: Stephen Kitt <skitt@redhat.com> (cherry picked from commit `fc77796287`)	2022-01-26 08:44:26 -05:00