Donavan Fritz
71e584cf96
NodeConfig.Spec.Defaults adds per-node IPv6/IPv4 family defaults that pod annotations can override; built-in baseline (v6=true, v4=false) still applies when the field is omitted. bird.Render now validates every operator-supplied value (peer addresses, CIDRs, anycast IPs, source addresses) before templating — fuzz found a peer address containing `}` produced unbalanced braces in bird.conf. Failing input preserved as a regression seed. Fuzz targets added for ParseAnnotations, ParseCNIArgs, HostIfaceName, canonical, IPAM allocate sequences, embed.Embed, and bird.Render. Hardened canonical/ipToU32 against nil and non-IPv4 inputs. README rewritten for outside readers — quickstart, NodeConfig + annotation reference with worked examples, anycast use cases, comparison vs Calico and Cilium, requirements, limitations. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
101 lines
3.4 KiB
YAML
101 lines
3.4 KiB
YAML
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
name: nodeconfigs.flock.fritzlab.net
|
|
spec:
|
|
group: flock.fritzlab.net
|
|
scope: Cluster
|
|
names:
|
|
kind: NodeConfig
|
|
listKind: NodeConfigList
|
|
singular: nodeconfig
|
|
plural: nodeconfigs
|
|
shortNames:
|
|
- fnc
|
|
versions:
|
|
- name: v1alpha1
|
|
served: true
|
|
storage: true
|
|
schema:
|
|
openAPIV3Schema:
|
|
type: object
|
|
required: [spec]
|
|
description: |
|
|
NodeConfig is the per-node operator-supplied configuration for the
|
|
flock CNI agent. Its name MUST equal the Kubernetes node name.
|
|
properties:
|
|
spec:
|
|
type: object
|
|
required: [bgp]
|
|
properties:
|
|
cidr6:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: IPv6 CIDR owned and aggregate-advertised by this node.
|
|
cidr4:
|
|
type: array
|
|
items:
|
|
type: string
|
|
description: IPv4 CIDR owned and aggregate-advertised by this node.
|
|
defaults:
|
|
type: object
|
|
description: |
|
|
Per-node baseline for which address families a pod receives
|
|
when its own annotations don't specify. Pod annotations
|
|
flock.fritzlab.net/ipv6 and flock.fritzlab.net/ipv4 always
|
|
override these defaults. Built-in fallback (when this block
|
|
or any field is omitted) is IPv6=true, IPv4=false.
|
|
properties:
|
|
ipv6:
|
|
type: boolean
|
|
description: |
|
|
Default IPv6 inclusion for pods on this node. Omit to
|
|
inherit the built-in baseline (true).
|
|
ipv4:
|
|
type: boolean
|
|
description: |
|
|
Default IPv4 inclusion for pods on this node. Omit to
|
|
inherit the built-in baseline (false).
|
|
bgp:
|
|
type: object
|
|
required: [asn, peers]
|
|
properties:
|
|
asn:
|
|
type: integer
|
|
format: int64
|
|
minimum: 1
|
|
maximum: 4294967295
|
|
description: This node's local ASN.
|
|
peers:
|
|
type: array
|
|
minItems: 1
|
|
items:
|
|
type: object
|
|
required: [address, asn]
|
|
properties:
|
|
address:
|
|
type: string
|
|
description: Peer IP (IPv6 or IPv4).
|
|
asn:
|
|
type: integer
|
|
format: int64
|
|
minimum: 1
|
|
maximum: 4294967295
|
|
additionalPrinterColumns:
|
|
- name: ASN
|
|
type: integer
|
|
jsonPath: .spec.bgp.asn
|
|
- name: CIDR6
|
|
type: string
|
|
jsonPath: .spec.cidr6
|
|
- name: CIDR4
|
|
type: string
|
|
jsonPath: .spec.cidr4
|
|
- name: DefV6
|
|
type: boolean
|
|
jsonPath: .spec.defaults.ipv6
|
|
- name: DefV4
|
|
type: boolean
|
|
jsonPath: .spec.defaults.ipv4
|