Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pkg/: FEATURE: support allowed IPs outside a cluster #179

Merged
merged 2 commits into from
Jun 15, 2021

Conversation

leonnicolas
Copy link
Collaborator

Users can specify IPs with the annotation "allowed-location-ips".
It makes no difference which node of a location is annotated.
The IP should be routable from the particular location, e.g. a printer in
the same LAN.
This way these IPs become routable from other location.

Signed-off-by: leonnicolas leonloechner@gmx.de

@leonnicolas leonnicolas linked an issue May 27, 2021 that may be closed by this pull request
pkg/mesh/routes.go Outdated Show resolved Hide resolved
pkg/mesh/routes.go Outdated Show resolved Hide resolved
pkg/mesh/routes.go Outdated Show resolved Hide resolved
pkg/mesh/topology.go Outdated Show resolved Hide resolved
pkg/mesh/topology.go Outdated Show resolved Hide resolved
pkg/mesh/topology.go Outdated Show resolved Hide resolved
pkg/k8s/backend.go Outdated Show resolved Hide resolved
@leonnicolas
Copy link
Collaborator Author

Another question is if we should do any checks. I think you can mess up all networking if you specify a wireguard ip or something out of the pod or service cidr as an allowed location ip?

@leonnicolas leonnicolas force-pushed the location_allowed_ips branch from 3659de4 to af32cc7 Compare May 30, 2021 19:16
Copy link
Owner

@squat squat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This LGTM, i only have small aesthetic suggestions.

Fixes #164

pkg/k8s/backend.go Outdated Show resolved Hide resolved
pkg/mesh/routes.go Outdated Show resolved Hide resolved
pkg/mesh/routes.go Outdated Show resolved Hide resolved
pkg/mesh/topology.go Show resolved Hide resolved
@leonnicolas leonnicolas marked this pull request as ready for review June 4, 2021 08:20
@squat
Copy link
Owner

squat commented Jun 4, 2021

Looks amazing! Should we document this in this PR? Or in a follow up PR? i.e. add it to this table: https://github.com/squat/kilo/blob/main/docs/annotations.md#annotations

@leonnicolas leonnicolas force-pushed the location_allowed_ips branch from 2228c37 to efddd2c Compare June 6, 2021 20:12
leonnicolas and others added 2 commits June 15, 2021 22:17
Users can specify IPs with the annotation "allowed-location-ips".
It makes no difference which node of a location is annotated.
The IP should be routable from the particular location, e.g. a printer in
the same LAN.
This way these IPs become routable from other location.

Signed-off-by: leonnicolas <leonloechner@gmx.de>

Co-authored-by: Lucas Servén Marín <lserven@gmail.com>
Signed-off-by: leonnicolas <leonloechner@gmx.de>
@leonnicolas leonnicolas force-pushed the location_allowed_ips branch from efddd2c to 0255214 Compare June 15, 2021 20:21
@squat squat merged commit 311414e into main Jun 15, 2021
@squat squat deleted the location_allowed_ips branch June 15, 2021 21:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add allowed IPs to a location
2 participants