Donavan Fritz 89a3502446
Build flock Image / build (push) Has been cancelled
M6: anycast — pod lo + Ready-gated /128/32 + BIRD export
CNI ADD now adds anycast IPs to the pod's lo interface (NOT eth0 — design
doc rationale: avoid NDP/ARP DAD conflicts when N replicas share an IP).
Allocation persists the anycast list.

AnycastReconciler:
  desired = { ip → flock<8hex> } from
            committed allocations × pod.Status.PodReady=True
  diff against advertised, install/remove host /128 (v6) or /32 (v4)
  re-render bird.conf with the active set

Triggers: 2s tick, AfterCommit (per ADD/DEL), Pod informer Ready
transitions (PodCache.OnReadyChange callback).

The bird template already supported Anycast6/Anycast4 via the export
filter — this turn finally drives those slices from runtime.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-04-25 07:36:47 -05:00

flock

Kubernetes CNI for sjc001. Per-pod IPv4 opt-in, IID embedding, Ready-gated anycast via BGP.

Design doc: k8s-manager/dfritz-cni.md (in the operator's k8s-manager repo).

Status: M1 scaffold. Not functional. See milestones table in the design doc.

Layout

  • cmd/flock — CNI plugin binary (kubelet-invoked)
  • cmd/flock-agent — DaemonSet binary
  • pkg/api/v1alpha1NodeConfig CRD types
  • pkg/cni — CNI plugin internals + RPC client
  • pkg/agent — agent server, IPAM, state file, anycast, NetworkPolicy
  • pkg/embedip-algo IID embedding (pure)
  • pkg/routing/{bird,ospf} — routing backends
  • deploy/ — CRDs, RBAC, DaemonSet manifests

License

Apache 2.0.

S
Description
Kubernetes CNI for sjc001 — per-pod IPv4 opt-in, IID embedding, Ready-gated anycast via BGP
Readme 450 KiB
Languages
Go 99.7%
Dockerfile 0.3%