linkerd / linkerd2

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
https://linkerd.io
Apache License 2.0
10.49k stars 1.27k forks source link

Allow port ranges in dynamic authorization policy resources #12624

Open js185692 opened 1 month ago

js185692 commented 1 month ago

What problem are you trying to solve?

I am trying to mesh a storage solution called Piraeus which has a component called Linstor Satellite. One of the things the satellites manage are DRBD devices across multiple nodes, which communicate with each other. Within Piraeus, we can define the port range (for example; 7000-7999) that these devices should use for communication. Currently, Linkerd's authorization policy only allows us to specify an individual port.

How should the problem be solved?

The Server resource should accept a single port or a range of ports.

Any alternatives you've considered?

Having a controller running in the cluster that creates each individual authorization policy for each port used.

How would users interact with this feature?

No response

Would you like to work on this feature?

yes