tree d3a4605fa9cefa9dccc79fe3df71d1e4335381a8
parent b6ed72eabf092066a837fea4b68846376bd70e8a
author Lorenz Brun <lorenz@monogon.tech> 1738073053 +0100
committer Lorenz Brun <lorenz@monogon.tech> 1738767323 +0000

metropolis: use interface groups

This adds interface groups to all K8s pod interfaces via a CNI plugin
patch and corresponding configuration. It also adds an interface group
to the clusternet interface. Using these new interface groups the
nftables rules for NAT can be simplified.

These will also be used by the network policy plugin later.

Change-Id: I4638a4349ccb12b8724ad28ae34bb61cac4b4ece
Reviewed-on: https://review.monogon.dev/c/monogon/+/3814
Tested-by: Jenkins CI
Reviewed-by: Jan Schär <jan@monogon.tech>