Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Initial commit #1

Merged
merged 1 commit into from
Jul 12, 2022
Merged

Conversation

adrianchiris
Copy link
Collaborator

  • Add basic daemon implementation that sets up signal
    handling and does nothing
  • Add Makefile with basic targets to build, build image,
    run test, deploy and undeploy.
  • Add Dockerfile to build daemon image including
    multi-stage build to support building updated iproute2
    package for updated TC userspace functionality as first
    implementation relies on executing tc shell commands
  • Initialize go.mod/go.sum
  • Add signal handling functionality to utils package
  • Add CONTRIBUTING and OWNERS file

Signed-off-by: Adrian Chiris [email protected]

.gitignore Outdated
e2e/bin/

# binary at the top
/multi-networkpolicy-iptables
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please update to the right binary file

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems unneeded. Makefile will output to build directory.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will remove altogether

securityContext:
privileged: true
capabilities:
add: ["SYS_ADMIN", "SYS_NET_ADMIN"]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why you need capabilities if it privlieged ?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

also i think we would want to avoid privileged.

will just add NET_ADMIN cap (and remove privileged) as it seems to be enough.

@adrianchiris adrianchiris force-pushed the initial-commit branch 2 times, most recently from 33ea8b5 to a97c8a5 Compare July 11, 2022 15:09
cpu: "200m"
memory: "300Mi"
securityContext:
privileged: true
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you still keep the privileged ?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

appologies, with all the PRs and rebases this must have slipped. will update now

- Add basic daemon implementation that sets up signal
  handling and does nothing
- Add Makefile with basic targets to build, build image,
  run test, deploy and undeploy.
- Add Dockerfile to build daemon image including
  multi-stage build to support building updated iproute2
  package for updated TC userspace functionality as first
  implementation relies on executing tc shell commands
- Initialize go.mod/go.sum
- Add signal handling functionality to utils package
- Add CONTRIBUTING and OWNERS file

Signed-off-by: Adrian Chiris <[email protected]>
@moshe010 moshe010 merged commit b5777b9 into k8snetworkplumbingwg:main Jul 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants