14 Commits (ff5c633fe7a2422ed2aa18ce8cdf52f758433873)

Author	SHA1	Message	Date
Brad Davidson	ff679fb3ab	Refactor supervisor listener startup and add metrics ... * Refactor agent supervisor listener startup and authn/authz to use upstream auth delegators to perform for SubjectAccessReview for access to metrics. * Convert spegel and pprof handlers over to new structure. * Promote bind-address to agent flag to allow setting supervisor bind address for both agent and server. * Promote enable-pprof to agent flag to allow profiling agents. Access to the pprof endpoint now requires client cert auth, similar to the spegel registry api endpoint. * Add prometheus metrics handler. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	6 months ago
Manuel Buil	f2c7117374	Take IPFamily precedence based on order ... Signed-off-by: Manuel Buil <mbuil@suse.com>	1 year ago
Manuel Buil	8c197bdce4	Include the interface name in the error message ... Signed-off-by: Manuel Buil <mbuil@suse.com>	1 year ago
Manuel Buil	f21a01474d	Check if we are on ipv4, ipv6 or dualStack when doing tailscale ... Signed-off-by: Manuel Buil <mbuil@suse.com>	1 year ago
Manuel Buil	437ad128c7	Migrate netutil methods into /utils/net.go ... Signed-off-by: Manuel Buil <mbuil@suse.com>	2 years ago
Brad Davidson	32d62c5786	Use default address family when adding kubernetes service address to SAN list ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Roberto Bonafiglia	abdf0c7319	Fix comments and add check in case of IPv6 only node ... Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>	2 years ago
Roberto Bonafiglia	d90ba30353	Added NodeIP autodect in case of dualstack connection ... Signed-off-by: Roberto Bonafiglia <roberto.bonafiglia@suse.com>	2 years ago
Brad Davidson	d3242bea3c	Refactor egress-selector pods mode to watch pods ... Watching pods appears to be the most reliable way to ensure that the proxy routes and authorizes connections. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Olli Janatuinen	966f4d6a01	Add support for IPv6 only mode ... Automatically switch to IPv6 only mode if first node-ip is IPv6 address Signed-off-by: Olli Janatuinen <olli.janatuinen@gmail.com>	3 years ago
Alexey Medvedchikov	8f389ab030	Include node-external-ip in serving-kubelet.crt SANs (#4620) ... * Include node-external-ip in serving-kubelet.crt SANs Signed-off-by: Alexey Medvedchikov <alexeymedvedchikov@improbable.io>	3 years ago
Brad Davidson	cf12a13175	Add missing node name entry to apiserver SAN list ... Also honor node-ip when adding the node address to the SAN list, instead of hardcoding the autodetected IP address. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	3 years ago
Manuel Buil	96dcef478a	Add functions to separate ipv4 from ipv6 functions ... Signed-off-by: Manuel Buil <mbuil@suse.com>	3 years ago
Brad Davidson	2705431d96	Add support for dual-stack Pod/Service CIDRs and node IP addresses (#3212) ... * Add support for dual-stack cluster/service CIDRs and node addresses Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	4 years ago