Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use nmstate NodeNetworkConfigurationPolicy instead of manual ip route commands #13

Open
nirs opened this issue Dec 13, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@nirs
Copy link
Owner

nirs commented Dec 13, 2023

The nmstate operator provides what we need to do the blocking using cluster wide configuration.
https://nmstate.io/kubernetes-nmstate/user-guide/102-configuration

The general approach with nmstate:

  • inspect the cluster to block, collect all addresses
  • prepare NetworkConfigurationPolicy specifying the blackhole routes
  • apply the policy to the target clusters
  • wait until the policy is applied

Status

Seems that blackhole route is not support yet:
nmstate/kubernetes-nmstate#1222

@nirs nirs mentioned this issue Dec 13, 2023
1 task
@nirs nirs added the enhancement New feature or request label Dec 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant