tree f18c60fb92202ce2d5ec7041c85579865a81509d
parent b876fc31f12628562a51c70668b318b9fc50478b
author Lorenz Brun <lorenz@nexantic.com> 1593009969 +0200
committer Lorenz Brun <lorenz@nexantic.com> 1593009969 +0200

Add Wireguard-based K8s pod networking

This adds a pod networking runnable based on Wireguard which watches all nodes
and adds their K8s IPAM allocations as routes into the kernel & WireGuard. It only depends
on K8s and only performs direct routing.

Test Plan: Manually tested by spinning up a two-node cluster and running two Alpine pods pinging eachother. Can be covered by E2E tests once we can do image preseeding for the test infra (T793).

Bug: T487

X-Origin-Diff: phab/D573
GitOrigin-RevId: ba3fc36f421fd75002f6cf8bea25ed6f1eb457b0