search

metal-stack / firewall-controller

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics
MIT License
47 stars 4 forks source link

Self-Reconcilation #57

Closed mwindower closed 3 years ago

mwindower commented 3 years ago

The firewall crd should contain a firewall-controller version that is managed by gardener-extension-provider-metal.

The firewall-controller checks for changes and replaces itself, exits and gets restarted by systemd in the new version.

With that, we could also use the release-drafter approach and hold the firewall-controller version in the release vector.

majst01 commented 3 years ago

This sounds quite easy to achieve, the only action to be taken is to render the version into the systemd-service file