-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Initial commit #1
Initial commit #1
Conversation
.gitignore
Outdated
e2e/bin/ | ||
|
||
# binary at the top | ||
/multi-networkpolicy-iptables |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
please update to the right binary file
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It seems unneeded. Makefile will output to build
directory.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
will remove altogether
deploy/deploy.yaml
Outdated
securityContext: | ||
privileged: true | ||
capabilities: | ||
add: ["SYS_ADMIN", "SYS_NET_ADMIN"] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why you need capabilities if it privlieged ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
also i think we would want to avoid privileged.
will just add NET_ADMIN cap (and remove privileged) as it seems to be enough.
33ea8b5
to
a97c8a5
Compare
deploy/deploy.yaml
Outdated
cpu: "200m" | ||
memory: "300Mi" | ||
securityContext: | ||
privileged: true |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you still keep the privileged ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
appologies, with all the PRs and rebases this must have slipped. will update now
- Add basic daemon implementation that sets up signal handling and does nothing - Add Makefile with basic targets to build, build image, run test, deploy and undeploy. - Add Dockerfile to build daemon image including multi-stage build to support building updated iproute2 package for updated TC userspace functionality as first implementation relies on executing tc shell commands - Initialize go.mod/go.sum - Add signal handling functionality to utils package - Add CONTRIBUTING and OWNERS file Signed-off-by: Adrian Chiris <[email protected]>
a97c8a5
to
dc87593
Compare
handling and does nothing
run test, deploy and undeploy.
multi-stage build to support building updated iproute2
package for updated TC userspace functionality as first
implementation relies on executing tc shell commands
Signed-off-by: Adrian Chiris [email protected]