| commit | 6a09bd5dbf49c438dc9c5743c8724ddc6efbe505 | [log] [tgz] |
|---|---|---|
| author | Lorenz Brun <lorenz@monogon.tech> | Wed Jun 21 17:40:32 2023 +0200 |
| committer | Lorenz Brun <lorenz@monogon.tech> | Wed Jun 21 16:04:12 2023 +0000 |
| tree | d4829766a1844f761187c70a44b5101363d8637c | |
| parent | eca5af965b6d95d953066a298ee896791ee00796 [diff] |
m/n/c/network: make SNAT generic This changes the SNAT/Masquerade rule from being a thing set up per interface which was only implemented by the dynamic network runnable to a generic rule set up by the general network service part shared between the static and dynamic implementations. It also tries to avoid NATing host-originated traffic. Matching on interface names is argubly ugly but the alternative is patching CNI plugins, which is also ugly. Change-Id: I7ec40fc244ae4689b6f96ab87dbebe9a6c43dd70 Reviewed-on: https://review.monogon.dev/c/monogon/+/1844 Reviewed-by: Serge Bazanski <serge@monogon.tech> Tested-by: Jenkins CI
This is the main repository containing the source code for the Monogon Platform.
This is pre-release software - take a look, and check back later!
Our build environment is self-contained and requires only minimal host dependencies:
/dev/kvm (if you want to run tests).Our docs assume that Bazelisk is available as bazel on your PATH.
Refer to SETUP.md for detailed instructions.
Build CLI and node image:
bazel build //metropolis/cli/dbg //:launch -c dbg
Launch an ephemeral test node:
bazel test //:launch -c dbg --test_output=streamed
Run a kubectl command while the test is running:
bazel-bin/metropolis/cli/dbg/dbg_/dbg kubectl describe node
Run full test suite:
bazel test -c dbg //...