Reconcile network configuration

metal-stack / firewall-controller

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics

MIT License

47 stars 4 forks source link

Closed mwindower closed 3 years ago

mwindower commented 3 years ago

reconcile network configuration with the information given in the firewall spec by the gardener-extension-provider-metal

mwindower commented 3 years ago

Successfully tested on a cluster in the test environment. With a release of the firewall-controller we could add this to the gepm.

mwindower commented 3 years ago

some notes here:

changed the signature of the apply method of metal-networker
record events about network reconcilation
we check all flavors of FRR configurations we generate in combination with FRR 7.3 and 7.5 and Ubuntu+Debian - the check for FRR 7.2 is not sucessful (but only because of the machine template that uses a newer instruction ... but this is irrelevant for the firewall-controller)