-
Notifications
You must be signed in to change notification settings - Fork 127
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pkg/: FEATURE: support allowed IPs outside a cluster #179
Conversation
Another question is if we should do any checks. I think you can mess up all networking if you specify a wireguard ip or something out of the pod or service cidr as an allowed location ip? |
3659de4
to
af32cc7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This LGTM, i only have small aesthetic suggestions.
Fixes #164
Looks amazing! Should we document this in this PR? Or in a follow up PR? i.e. add it to this table: https://github.com/squat/kilo/blob/main/docs/annotations.md#annotations |
2228c37
to
efddd2c
Compare
Users can specify IPs with the annotation "allowed-location-ips". It makes no difference which node of a location is annotated. The IP should be routable from the particular location, e.g. a printer in the same LAN. This way these IPs become routable from other location. Signed-off-by: leonnicolas <leonloechner@gmx.de> Co-authored-by: Lucas Servén Marín <lserven@gmail.com>
Signed-off-by: leonnicolas <leonloechner@gmx.de>
efddd2c
to
0255214
Compare
Users can specify IPs with the annotation "allowed-location-ips".
It makes no difference which node of a location is annotated.
The IP should be routable from the particular location, e.g. a printer in
the same LAN.
This way these IPs become routable from other location.
Signed-off-by: leonnicolas leonloechner@gmx.de