mirrors/kube-router
1
0
Fork 0
mirror of https://github.com/cloudnativelabs/kube-router.git synced 2025-10-05 15:01:04 +02:00
Code Issues Packages Projects Releases Wiki Activity
kube-router/pkg/controllers/proxy
History
Steven Armstrong 4da8ee70f2 [RFC] prevent host services from being accessible through service IPs (#618) 
* prevent host services from being accessible through service IPs

- on startup create ipsets and firewall rules
- on sync update ipsets
- on cleanup remove firewall rules and ipsets

Fixes #282.

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>

* ensure iptables rules are also available during cleanup

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>

* first check if chain exists

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>

* err not a new variable

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>

* more redeclared vars

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>

* maintain a ipset for local addresses and exclude those from our default deny rule

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>

* copy/paste errors

Signed-off-by: Steven Armstrong <steven.armstrong@id.ethz.ch>
2019-01-10 23:16:37 +05:30
..
network_services_controller_moq.go
Integrate ip_vs_mh scheduler into kube-router (#564)
2018-11-12 14:13:07 +01:00
network_services_controller_test.go
Integrate ip_vs_mh scheduler into kube-router (#564)
2018-11-12 14:13:07 +01:00
network_services_controller.go
[RFC] prevent host services from being accessible through service IPs (#618)
2019-01-10 23:16:37 +05:30