| commit | 0e291a193cbfd0b169e749e7f28adc954a58f560 | [log] [tgz] |
|---|---|---|
| author | Lorenz Brun <lorenz@monogon.tech> | Thu Jun 01 12:22:45 2023 +0200 |
| committer | Lorenz Brun <lorenz@monogon.tech> | Tue Jun 13 13:03:53 2023 +0000 |
| tree | 01b7ad51279b9060c3c967a0061826d37dbfaf01 | |
| parent | 4264b8c641109c05c4828b40cd2e01e686890903 [diff] |
m/node: clean up DNS service The primary change in here is that CoreDNS now only listens on the loopback interface by default. This fixes #217 as it cannot be accessed from the outside anymore. Since the containers do not share the host network namespace, they can now no longer access the DNS service. This is solved by introducing a new Network Service API to add listener IPs and using a link-local IP, 169.254.77.53 for the container DNS. While at it, I cleaned up various parts of the DNS code. Change-Id: Id7b618f62690032db335e8478b9de84410c210a1 Reviewed-on: https://review.monogon.dev/c/monogon/+/1759 Tested-by: Jenkins CI Reviewed-by: Serge Bazanski <serge@monogon.tech>
This is the main repository containing the source code for the Monogon Platform.
This is pre-release software - take a look, and check back later!
Our build environment is self-contained and requires only minimal host dependencies:
/dev/kvm (if you want to run tests).Our docs assume that Bazelisk is available as bazel on your PATH.
Refer to SETUP.md for detailed instructions.
Build CLI and node image:
bazel build //metropolis/cli/dbg //:launch -c dbg
Launch an ephemeral test node:
bazel test //:launch -c dbg --test_output=streamed
Run a kubectl command while the test is running:
bazel-bin/metropolis/cli/dbg/dbg_/dbg kubectl describe node
Run full test suite:
bazel test -c dbg //...