mirror of
https://github.com/YuzuZensai/netbird-kubernetes-operator.git
synced 2026-09-13 10:49:15 +00:00
main
14
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
   |
e752d1587f |
Bump github.com/netbirdio/netbird from 0.72.4 to 0.74.7 (#376)
Bumps [github.com/netbirdio/netbird](https://github.com/netbirdio/netbird) from 0.72.4 to 0.74.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's releases</a>.</em></p> <blockquote> <h2>v0.74.7</h2> <h2>What's Changed</h2> <ul> <li>[relay] Handle QUIC connections concurrently to prevent handshake head-of-line blocking by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6784">netbirdio/netbird#6784</a></li> <li>[client] Reject leading hyphen in getent input to prevent flag injection by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6787">netbirdio/netbird#6787</a></li> <li>[client] Sanitize peer FQDN/hostname in generated SSH config by <a href="https://github.com/riccardomanfrin"><code>@riccardomanfrin</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6805">netbirdio/netbird#6805</a></li> <li>[client] Disable gVisor TCP RACK loss detection on Windows by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6808">netbirdio/netbird#6808</a></li> <li>[client] Rename isValidAccessToken to reflect audience-only check by <a href="https://github.com/riccardomanfrin"><code>@riccardomanfrin</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6806">netbirdio/netbird#6806</a></li> <li>[client] Bind netstack SOCKS5 proxy to 127.0.0.1 by default by <a href="https://github.com/riccardomanfrin"><code>@riccardomanfrin</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6812">netbirdio/netbird#6812</a></li> <li>[client] Evaluate IP fragments against firewall ACLs by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6781">netbirdio/netbird#6781</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.74.6...v0.74.7">https://github.com/netbirdio/netbird/compare/v0.74.6...v0.74.7</a></p> <h2>v0.74.6</h2> <h2>What's Changed</h2> <ul> <li>[client] ios: preserve WireGuard key on interactive re-login (<a href="https://redirect.github.com/netbirdio/netbird/issues/6777">#6777</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.74.5...v0.74.6">https://github.com/netbirdio/netbird/compare/v0.74.5...v0.74.6</a></p> <h2>v0.74.5</h2> <h2>What's Changed</h2> <ul> <li>[proxy] enforce model allowlist for URL-routed providers (Bedrock/Vertex) by <a href="https://github.com/mlsmaycon"><code>@mlsmaycon</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6764">netbirdio/netbird#6764</a></li> <li>[management] Remove proxy peer stale deduplication logic by <a href="https://github.com/mlsmaycon"><code>@mlsmaycon</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6768">netbirdio/netbird#6768</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.74.4...v0.74.5">https://github.com/netbirdio/netbird/compare/v0.74.4...v0.74.5</a></p> <h2>v0.74.4</h2> <h2>What's Changed</h2> <ul> <li>[management] fix: prevent reverse proxy domain from being pushed as DNS search domain by <a href="https://github.com/blaugrau90"><code>@blaugrau90</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6498">netbirdio/netbird#6498</a></li> <li>[client] Recover from rosenpass key desync by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6714">netbirdio/netbird#6714</a></li> <li>[client] Bump golang.org/x/crypto to v0.54.0 by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6709">netbirdio/netbird#6709</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/blaugrau90"><code>@blaugrau90</code></a> made their first contribution in <a href="https://redirect.github.com/netbirdio/netbird/pull/6498">netbirdio/netbird#6498</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.74.3...v0.74.4">https://github.com/netbirdio/netbird/compare/v0.74.3...v0.74.4</a></p> <h2>v0.74.3</h2> <h2>What's Changed</h2> <ul> <li>[client] fix MDM managementURL conflict on default-port URL echo by <a href="https://github.com/riccardomanfrin"><code>@riccardomanfrin</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6672">netbirdio/netbird#6672</a></li> <li>[client] Update gopsutil to v4 by <a href="https://github.com/mlsmaycon"><code>@mlsmaycon</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6688">netbirdio/netbird#6688</a></li> <li>[client] Fix hanging status command during relay dial by <a href="https://github.com/theodorsm"><code>@theodorsm</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6694">netbirdio/netbird#6694</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.74.2...v0.74.3">https://github.com/netbirdio/netbird/compare/v0.74.2...v0.74.3</a></p> <h2>v0.74.2</h2> <h2>What's Changed</h2> <ul> <li>[management] Add vLLM e2e test by <a href="https://github.com/braginini"><code>@braginini</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6649">netbirdio/netbird#6649</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netbirdio/netbird/commit/a1c9427d8004576e2cbb9e546d409847fa9df318"><code>a1c9427</code></a> [client] Evaluate IP fragments against firewall ACLs (<a href="https://redirect.github.com/netbirdio/netbird/issues/6781">#6781</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/b7b0d5796e988ac5f369d51d3a16b162d5fb9522"><code>b7b0d57</code></a> [client] Bind netstack SOCKS5 proxy to 127.0.0.1 by default (<a href="https://redirect.github.com/netbirdio/netbird/issues/6812">#6812</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/3f8c4473783424e1642d2991b896add973249d97"><code>3f8c447</code></a> [client] Rename isValidAccessToken to reflect audience-only check (<a href="https://redirect.github.com/netbirdio/netbird/issues/6806">#6806</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/6e3f4d8722d1c3f4482c44aec725aaba80c4512c"><code>6e3f4d8</code></a> [client] Disable gVisor TCP RACK loss detection on Windows (<a href="https://redirect.github.com/netbirdio/netbird/issues/6808">#6808</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/099ae4bc6cc8ab95ef16343acb87c33b8197711c"><code>099ae4b</code></a> [client] Sanitize peer FQDN/hostname in generated SSH config (<a href="https://redirect.github.com/netbirdio/netbird/issues/6805">#6805</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/63d60ba490794eebd0ad5ce77e4d31269e9c793b"><code>63d60ba</code></a> [client] Reject leading hyphen in getent input to prevent flag injection (<a href="https://redirect.github.com/netbirdio/netbird/issues/6787">#6787</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/62fc8d254e636c3053ae8a21c4ea075558a8273f"><code>62fc8d2</code></a> [relay] Handle QUIC connections concurrently to prevent handshake head-of-lin...</li> <li><a href="https://github.com/netbirdio/netbird/commit/3a2f773d655d88d16ed953fc2a114a4e690a1b08"><code>3a2f773</code></a> [client] preserve WireGuard key on interactive re-login (<a href="https://redirect.github.com/netbirdio/netbird/issues/6777">#6777</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/f0eed7564f3a9138962da1408986e4666d7137b5"><code>f0eed75</code></a> [management] Remove proxy peer stale deduplication logic (<a href="https://redirect.github.com/netbirdio/netbird/issues/6768">#6768</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/277d8e4c5352950e1ec4fbd21a3266f0412b09fe"><code>277d8e4</code></a> [proxy] enforce model allowlist for URL-routed providers (Bedrock/Vertex) (<a href="https://redirect.github.com/netbirdio/netbird/issues/6">#6</a>...</li> <li>Additional commits viewable in <a href="https://github.com/netbirdio/netbird/compare/v0.72.4...v0.74.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> <!-- codesmith:footer --> --- <a href="https://app.blacksmith.sh/netbirdio/codesmith/kubernetes-operator/pr/376"><picture><source media="(prefers-color-scheme: dark)" srcset="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v2.svg"><source media="(prefers-color-scheme: light)" srcset="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-light-v2.svg"><img alt="View with Codesmith" src="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v2.svg"></picture></a> <a href="https://backend.blacksmith.sh/track/enable-autofix?expires=1787085769&installation_id=146802194&pr_number=376&repository=netbirdio%2Fkubernetes-operator&return_to=https%3A%2F%2Fgithub.com%2Fnetbirdio%2Fkubernetes-operator%2Fpull%2F376&signature=2f50a4b5245bbba3f14f2249365f03c700d30db07e15709056766b6a716394dd"><picture><source media="(prefers-color-scheme: dark)" srcset="https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-light.svg"><img alt="Autofix with Codesmith" src="https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg"></picture></a> <sup>Need help on this PR? Tag <code>/codesmith</code> with what you need. Autofix is disabled.</sup> <!-- codesmith:autofix:disabled --> <!-- /codesmith:footer --> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
 Philip LaineandGitHub
|
447bbc76cd |
Ensure netbird sidecar container starts first (#339)
This changes the webhook from appending the container to the end to the beginning. Fixes #323 <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Fixed pod injection ordering: injected components are now placed at the start of their respective lists to ensure correct initialization. * Updated injected sidecar behavior, including setting the restart policy to keep it running consistently. * Adjusted init-container ordering to ensure DNS-related initialization runs first. * **Tests** * Improved coverage by validating both container and sidecar injection modes, including restart policy and injected annotation behavior. <!-- end of auto-generated comment: release notes by coderabbit.ai --> |
||
|
Philip LaineandGitHub
|
b82544250f |
Make sidecar profile containers read only by default (#333)
This applies the same changes made to the network router to the sidecar profile container. Majority of users want read only containers so it should be the default. Fixes #312 Fixes #292 Fixes #144 |
||
|
Philip LaineandGitHub
|
c56f8de162 |
Fix sidecar injection when pod annotations is nil. (#250)
When a pod does not have any annotations the injector will fail. This change adds a test for the case and also fixes the issue. Fixes #246 Signed-off-by: Philip Laine <philip.laine@gmail.com> |
||
|
Philip LaineandGitHub
|
69afe3aade |
Fix SPDX license header (#231)
This change adds SPDX license headers to all files and eforces it with the linter. Signed-off-by: Philip Laine <philip.laine@gmail.com> |
||
|
Philip LaineandGitHub
|
74012deb27 |
Enforce import ordering and aliases (#216)
This change ensures import ordering and aliases is standardized. Something that is extra important when working with Kuberentes apis that have "standard" import aliases. Signed-off-by: Philip Laine <philip.laine@gmail.com> |
||
|
Philip LaineandGitHub
|
9838f0dccc |
Add sidecar profile (#192)
This change adds a new SidecarProfile resource which allows configuring client sidecar injection into pods. It replaces the older annotation based solution. This removes any pod specific configuration from the setup key and puts it all in this side car configuration. Fixes #188 Signed-off-by: Philip Laine <philip.laine@gmail.com> |
||
|
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Philip Laine |
81f7a2bd51 |
Bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.23.3 (#134)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.20.0 to 0.23.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kubernetes-sigs/controller-runtime/releases">sigs.k8s.io/controller-runtime's releases</a>.</em></p> <blockquote> <h2>v0.23.3</h2> <h2>What's Changed</h2> <ul> <li>🐛 Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if objects are equal by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3469">kubernetes-sigs/controller-runtime#3469</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.2...v0.23.3">https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.2...v0.23.3</a></p> <h2>v0.23.2</h2> <h2>What's Changed</h2> <ul> <li>🐛 Fix fake client's SSA status patch resource version check by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3446">kubernetes-sigs/controller-runtime#3446</a></li> <li>✨ Reduce memory usage of default webhooks by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3467">kubernetes-sigs/controller-runtime#3467</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.1...v0.23.2">https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.1...v0.23.2</a></p> <h2>v0.23.1</h2> <h2>What's Changed</h2> <ul> <li>🐛 Cache reader: Wait for cache sync when ReaderFailOnMissingInformer is true by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3433">kubernetes-sigs/controller-runtime#3433</a></li> <li>🐛 Fix panic when using CRs with embedded pointer structs by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3436">kubernetes-sigs/controller-runtime#3436</a></li> <li>🌱 Test cache reader waits for cache sync by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3438">kubernetes-sigs/controller-runtime#3438</a></li> <li>🐛 Fakeclient: Fix status apply if existing object has managedFields set by <a href="https://github.com/k8s-infra-cherrypick-robot"><code>@k8s-infra-cherrypick-robot</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3437">kubernetes-sigs/controller-runtime#3437</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.0...v0.23.1">https://github.com/kubernetes-sigs/controller-runtime/compare/v0.23.0...v0.23.1</a></p> <h2>v0.23.0</h2> <h2>🔆 Highlights</h2> <ul> <li>Client: Add subresource Apply support by <a href="https://github.com/alvaroaleman"><code>@alvaroaleman</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3321">kubernetes-sigs/controller-runtime#3321</a></li> <li>Conversion: Enable implementation of conversion outside of API packages by <a href="https://github.com/sbueringer"><code>@sbueringer</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3335">kubernetes-sigs/controller-runtime#3335</a></li> <li>Priorityqueue: Various improvements, bug fixes and now enabled per default</li> <li>Webhooks: Generic Validator and Defaulter by <a href="https://github.com/alvaroaleman"><code>@alvaroaleman</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3360">kubernetes-sigs/controller-runtime#3360</a></li> </ul> <h2>⚠️ Breaking changes</h2> <ul> <li>Dependencies: Update to k8s.io/* v1.35 by <a href="https://github.com/alvaroaleman"><code>@alvaroaleman</code></a> <a href="https://github.com/dongjiang1989"><code>@dongjiang1989</code></a> <a href="https://github.com/kannon92"><code>@kannon92</code></a> (<a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3316">#3316</a>, <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3349">#3349</a>, <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3386">#3386</a>, <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3391">#3391</a>, <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3401">#3401</a>)</li> <li>Client: Add subresource Apply support by <a href="https://github.com/alvaroaleman"><code>@alvaroaleman</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3321">kubernetes-sigs/controller-runtime#3321</a></li> <li>Events: Migration to the new events API by <a href="https://github.com/clebs"><code>@clebs</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3262">kubernetes-sigs/controller-runtime#3262</a> <ul> <li>Using the new <code>GetEventRecorderFor</code> requires updating your rbac for events to use the <code>events.k8s.io</code> apiGroup rather than the `` (core) apiGroup</li> </ul> </li> <li>Fakeclient: Set ResourceVersion for SSA Create by <a href="https://github.com/alvaroaleman"><code>@alvaroaleman</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3311">kubernetes-sigs/controller-runtime#3311</a></li> <li>Webhooks: Generic Validator and Defaulter by <a href="https://github.com/alvaroaleman"><code>@alvaroaleman</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3360">kubernetes-sigs/controller-runtime#3360</a> <ul> <li>Existing code of the form <code>builder.WebhookManagedBy(mgr).For(&corev1.Deployment{})</code> has to be changed to <code>builder.WebhookManagedBy(mgr, &appsv1.Deployment{})</code></li> <li>Existing webhook implementations have to be changed to take the concrete object rather than <code>runtime.Object</code>, for example from <code>ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error)</code> to <code>ValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)</code></li> </ul> </li> </ul> <h2>✨ Features</h2> <ul> <li>Cache: Allow fine-granular SyncPeriod configuration by <a href="https://github.com/sbueringer"><code>@sbueringer</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3376">kubernetes-sigs/controller-runtime#3376</a></li> <li>Client: Add FieldOwner option to client.Options by <a href="https://github.com/aerfio"><code>@aerfio</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3389">kubernetes-sigs/controller-runtime#3389</a></li> <li>Client: Add FieldValidation option to client.Options by <a href="https://github.com/aerfio"><code>@aerfio</code></a> in <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3393">kubernetes-sigs/controller-runtime#3393</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/f9589b9f2b9dddf8532b432bb8315f2820ab9971"><code>f9589b9</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3469">#3469</a> from k8s-infra-cherrypick-robot/cherry-pick-3468-to-...</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/25615ad1d1229db805cec6b0f3f29f284fe53be1"><code>25615ad</code></a> Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if object...</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/8122a6266696b980fc9219c2fbb48bb4ce60d12b"><code>8122a62</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3467">#3467</a> from k8s-infra-cherrypick-robot/cherry-pick-3463-to-...</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/35093c6117da44c29f3a03d06e379d606814018d"><code>35093c6</code></a> Reduce memory usage of default webhooks</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/4dbfa5c66aa24a35003c41507385c2a91e94d404"><code>4dbfa5c</code></a> [release-0.23] 🐛 Fix fake client's SSA status patch resource version check (#...</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/f52bbb8bb1a2275cbe90dec8d6c12d5cacb1a7de"><code>f52bbb8</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3437">#3437</a> from k8s-infra-cherrypick-robot/cherry-pick-3430-to-...</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/4f41337fdd898537c6633a174cd539cb2e0c4d15"><code>4f41337</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3438">#3438</a> from k8s-infra-cherrypick-robot/cherry-pick-3434-to-...</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/e29a1b93fae5c5f22c992c57b11dcf90ccc35c53"><code>e29a1b9</code></a> seedling: Test cache reader waits for cache sync</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/83c8dc31c46c621c336c8a7749ee41658b6d17e1"><code>83c8dc3</code></a> bug: Fakeclient: Fix status apply if existing object has managedFields set</li> <li><a href="https://github.com/kubernetes-sigs/controller-runtime/commit/bf6bcd55b4d5eba00273426d61db313dcd2a6c7f"><code>bf6bcd5</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3436">#3436</a> from k8s-infra-cherrypick-robot/cherry-pick-3431-to-...</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.0...v0.23.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Philip Laine <philip.laine@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Philip Laine <philip.laine@gmail.com> |
||
 Bethuel MmbagaandGitHub
|
5fb144559c |
Add support for running as a init sidecar container (#99)
Adds support for injecting the client as a [sidecar container](https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/) using the `netbird.io/init-sidecar: "true"` pod annotation. |
||
 Christian De LeonandGitHub
|
6c855c5d4e |
Fix: extra-dns-labels not being applied to pods (#82)
# Fix: NetBird extra-dns-labels not being applied to pods ## Problem The `netbird.io/extra-dns-labels` annotation was not working when applied to pods. Despite the webhook detecting the annotation and adding it to the NetBird container configuration, the extra DNS labels were not appearing in the NetBird UI or being applied to registered peers. ## Root Cause The pod webhook had two issues: 1. **Invalid setup key argument**: The webhook was passing `--setup-key-file /etc/nbkey` to the NetBird client, but this file path was never created. The setup key was already being passed via the `NB_SETUP_KEY` environment variable, making the file-based approach unnecessary and causing confusion in the client startup. 2. **NetBird CLI flag bug**: The webhook was using the `--extra-dns-labels` command line flag, but NetBird has a known issue ([netbirdio/netbird#4282](https://github.com/netbirdio/netbird/issues/4282)) where this flag is not properly processed. The workaround is to use the `NB_EXTRA_DNS_LABELS` environment variable instead. ## Solution - Removed the `--setup-key-file` argument entirely since the setup key is provided via environment variable - Removed all command line arguments from the NetBird container - Added `NB_EXTRA_DNS_LABELS` environment variable when the `netbird.io/extra-dns-labels` annotation is present - NetBird client now uses only environment variables for configuration, which is more reliable and matches the pattern used by the NBRoutingPeer controller ## Changes **Before:** ```go args := []string{ "--setup-key-file", "/etc/nbkey", "-m", managementURL, } // ... add extra-dns-labels to args ``` **After:** ```go envVars := []corev1.EnvVar{ {Name: "NB_SETUP_KEY", ValueFrom: ...}, {Name: "NB_MANAGEMENT_URL", Value: managementURL}, } // ... conditionally add NB_EXTRA_DNS_LABELS to envVars ``` ## Testing 1. Create a deployment with the `netbird.io/setup-key` and `netbird.io/extra-dns-labels` annotations: ```yaml annotations: netbird.io/setup-key: my-setup-key netbird.io/extra-dns-labels: "my-label,another-label" ``` 2. Verify the environment variable is set: ```bash kubectl get pod <pod-name> -o jsonpath='{.spec.containers[?(@.name=="netbird")].env[*]}' | jq . ``` 3. Check the NetBird UI to confirm the extra DNS labels appear on the registered peer 4. Verify the NetBird container logs show successful registration without errors ## References - NetBird issue: https://github.com/netbirdio/netbird/issues/4282 - Documentation: [Extra DNS Labels](https://docs.netbird.io/how-to/routing-traffic-to-private-networks#extra-dns-labels) --- This fix ensures that the `netbird.io/extra-dns-labels` annotation works as documented and provides a more robust configuration method by using environment variables consistently across all NetBird deployments in the operator. |
||
 M Essam Hamed
|
20b3ba60ba | Add optional Volume mounting for Client containers | ||
|
166091b8e0 |
Add ingress feature to controller (#5)
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> |
||
 Hakan Sariman
|
289d6f25d3 | add extra dns labels annotation | ||
|
M. EssamandGitHub
|
64091a6439 |
Add initial version with help and admission controller (#1)
- It adds a helm chart that will be hosted in the Github pages URL of this repository - an admission controller operator - Basic documentation for installing the operator, configuring CRDs and example pod configuration |
