From aef8d86e4b1fc2970e27e578a6dd92ae3024f933 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Thu, 24 May 2018 23:53:00 +0200
Subject: move kubernetes roles to subdir

---
 roles/kubernetes-net/templates/ifupdown.sh.j2 | 55 ---------------------------
 1 file changed, 55 deletions(-)
 delete mode 100644 roles/kubernetes-net/templates/ifupdown.sh.j2

(limited to 'roles/kubernetes-net/templates/ifupdown.sh.j2')

diff --git a/roles/kubernetes-net/templates/ifupdown.sh.j2 b/roles/kubernetes-net/templates/ifupdown.sh.j2
deleted file mode 100644
index 995d358b..00000000
--- a/roles/kubernetes-net/templates/ifupdown.sh.j2
+++ /dev/null
@@ -1,55 +0,0 @@
-#!/bin/bash
-
-set -e
-
-CONF_D="/var/lib/kubenet/"
-
-INET_IF="{{ ansible_default_ipv4.interface }}"
-
-POD_NET_CIDR="{{ kubernetes.pod_ip_range }}"
-
-{% set br_net = kubernetes.pod_ip_range | ipsubnet(kubernetes.pod_ip_range_size, kubernetes.net_index[inventory_hostname]) -%}
-BR_IF="kube-br0"
-BR_IP="{{ br_net | ipaddr(1) | ipaddr('address')  }}"
-BR_IP_CIDR="{{ br_net | ipaddr(1) }}"
-BR_NET_CIDR="{{ br_net }}"
-
-TUN_IF="kube-wg0"
-TUN_IP_CIDR="{{ kubernetes.pod_ip_range | ipsubnet(kubernetes.pod_ip_range_size, 0) | ipaddr(kubernetes.net_index[inventory_hostname]) }}"
-
-
-case "$1" in
-  up)
-    # bring up bridge for local pods
-    ip link add dev "$BR_IF" type bridge
-    ip addr add dev "$BR_IF" "$BR_IP_CIDR"
-    ip link set up dev "$BR_IF"
-    iptables -t nat -A POSTROUTING -s "$BR_NET_CIDR" -o "$INET_IF" -j MASQUERADE
-    modprobe br_netfilter
-
-    # bring up wireguard tunnel to other nodes
-    ip link add dev "$TUN_IF" type wireguard
-    ip addr add dev "$TUN_IF" "$TUN_IP_CIDR"
-    wg set "$TUN_IF" listen-port {{ kubenet_wireguard_port }} private-key "$CONF_D/$TUN_IF.privatekey"
-    ip link set up dev "$TUN_IF"
-
-    # make pods and service IPs reachable
-    # !!! use IP of bridge as source so we don't produce martians if direct-zones are involved!!!
-    ip route add "$POD_NET_CIDR" dev "$TUN_IF" src "$BR_IP"
-    ;;
-  down)
-    # bring down wireguard tunnel to other nodes
-    ip route del "$POD_NET_CIDR" dev "$TUN_IF"
-    ip link del dev "$TUN_IF"
-
-    # bring down bridge for local pods
-    iptables -t nat -D POSTROUTING -s "$BR_NET_CIDR" -o "$INET_IF" -j MASQUERADE
-    ip link del dev "$BR_IF"
-    ;;
-  *)
-    echo "usage: $0 (up|down)"
-    exit 1
-    ;;
-esac
-
-exit 0
-- 
cgit v1.2.3