mirror of
https://github.com/YuzuZensai/netbird-kubernetes-operator.git
synced 2026-09-13 10:49:15 +00:00
57ac526208
Bumps [github.com/netbirdio/netbird](https://github.com/netbirdio/netbird) from 0.66.0 to 0.66.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's releases</a>.</em></p> <blockquote> <h2>v0.66.3</h2> <h2>Release Notes for v0.66.3</h2> <h3>What's New</h3> <h4>Client Improvements</h4> <ul> <li>Fixed <strong>"reset connection" error after wake from sleep</strong> to improve reconnection stability.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5522">netbirdio/netbird#5522</a></li> <li>Fixed <strong>exit node menu not refreshing on Windows</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5553">netbirdio/netbird#5553</a></li> </ul> <h4>Management Improvements</h4> <ul> <li>Added <strong>per-target options to the reverse proxy</strong> (management + proxy).<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5501">netbirdio/netbird#5501</a></li> <li>Avoided breaking <strong>single account mode when switching domains</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5511">netbirdio/netbird#5511</a></li> <li>Added <strong>stable domain resolution for the combined server</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5515">netbirdio/netbird#5515</a></li> <li>Fixed <strong>domain uniqueness validation</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5529">netbirdio/netbird#5529</a></li> <li>Added <strong>activity events for domain operations</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5548">netbirdio/netbird#5548</a></li> <li>Switched proxy registration to use <strong>real IP address</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5525">netbirdio/netbird#5525</a></li> <li>Cached <strong>PKCE state</strong> to improve login flow reliability.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5516">netbirdio/netbird#5516</a></li> <li>Count <strong>login request duration metrics only for successful logins</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5545">netbirdio/netbird#5545</a></li> <li>Aggregated <strong>gRPC metrics by account ID</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5486">netbirdio/netbird#5486</a></li> </ul> <h4>Proxy Improvements</h4> <ul> <li>Refactored <strong>proxy metrics</strong> and added <strong>usage logs</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5533">netbirdio/netbird#5533</a></li> </ul> <h4>CI & Misc</h4> <ul> <li>Added <strong>PR title validation workflow</strong>.<br /> <a href="https://redirect.github.com/netbirdio/netbird/pull/5503">netbirdio/netbird#5503</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.66.2...v0.66.3">https://github.com/netbirdio/netbird/compare/v0.66.2...v0.66.3</a></p> <h2>v0.66.2</h2> <h2>What's Changed</h2> <ul> <li>[management] Store connected proxies in DB by <a href="https://github.com/pascal-fischer"><code>@pascal-fischer</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/5472">netbirdio/netbird#5472</a></li> <li>[management] Fix embedded IdP metrics to count local and generic OIDC users by <a href="https://github.com/braginini"><code>@braginini</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/5498">netbirdio/netbird#5498</a></li> <li>[client] Fix SSH JWT auth failure with Azure Entra ID iat backdating by <a href="https://github.com/hbzhost"><code>@hbzhost</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/5471">netbirdio/netbird#5471</a></li> <li>[misc] Add ISSUE_TEMPLATE configuration file by <a href="https://github.com/mlsmaycon"><code>@mlsmaycon</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/5500">netbirdio/netbird#5500</a></li> <li>[management] Replace in-memory expose tracker with SQL-backed operations by <a href="https://github.com/mlsmaycon"><code>@mlsmaycon</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/5494">netbirdio/netbird#5494</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/hbzhost"><code>@hbzhost</code></a> made their first contribution in <a href="https://redirect.github.com/netbirdio/netbird/pull/5471">netbirdio/netbird#5471</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netbirdio/netbird/commit/5585adce18cea6ba6e5673039b5d1f104006cedc"><code>5585adc</code></a> [management] add activity events for domains (<a href="https://redirect.github.com/netbirdio/netbird/issues/5548">#5548</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/f88429982306156f9edecb3ae8046135c9f0398a"><code>f884299</code></a> [proxy] refactor metrics and add usage logs (<a href="https://redirect.github.com/netbirdio/netbird/issues/5533">#5533</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/15aa6bae1b393459fe2300b815be1fe69331b20e"><code>15aa6ba</code></a> [client] Fix exit node menu not refreshing on Windows (<a href="https://redirect.github.com/netbirdio/netbird/issues/5553">#5553</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/11eb725ac8c56fb2430f0b940903ccba9c15c781"><code>11eb725</code></a> [management] only count login request duration for successful logins (<a href="https://redirect.github.com/netbirdio/netbird/issues/5545">#5545</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/30c02ab78c7bf05d610a636f7a2446144dd0ba01"><code>30c02ab</code></a> [management] use the cache for the pkce state (<a href="https://redirect.github.com/netbirdio/netbird/issues/5516">#5516</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/3acd86e34686caaf43748f9d780cb2252c229110"><code>3acd86e</code></a> [client] "reset connection" error on wake from sleep (<a href="https://redirect.github.com/netbirdio/netbird/issues/5522">#5522</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/5c20f13c48768a80d9e963f2d14565ff16f99563"><code>5c20f13</code></a> [management] fix domain uniqueness (<a href="https://redirect.github.com/netbirdio/netbird/issues/5529">#5529</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/e6587b071dac374ed2f4ca3d2219977d2e13ff02"><code>e6587b0</code></a> [management] use realip for proxy registration (<a href="https://redirect.github.com/netbirdio/netbird/issues/5525">#5525</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/85451ab4cd48101ba2d68832db4902e3cca9bf1b"><code>85451ab</code></a> [management] Add stable domain resolution for combined server (<a href="https://redirect.github.com/netbirdio/netbird/issues/5515">#5515</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/a7f3ba03eb6a284d9355192e1c3992a7ab6ef088"><code>a7f3ba0</code></a> [management] aggregate grpc metrics by accountID (<a href="https://redirect.github.com/netbirdio/netbird/issues/5486">#5486</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netbirdio/netbird/compare/v0.66.0...v0.66.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
NetBird Kubernetes Operator
For easily provisioning access to Kubernetes resources using NetBird.
https://github.com/user-attachments/assets/5472a499-e63d-4301-a513-ad84cfe5ca7b
Description
This operator easily provides NetBird access on Kubernetes clusters, allowing users to access internal resources directly.
Getting Started
Prerequisites
- (Recommended) helm version 3+
- kubectl version v1.11.3+.
- Access to a Kubernetes v1.11.3+ cluster.
- (Recommended) Cert Manager.
Deployment
- Add helm repository.
helm repo add netbirdio https://netbirdio.github.io/kubernetes-operator
- (Recommended) Install cert-manager for k8s API to communicate with the NetBird operator.
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.17.0/cert-manager.yaml
- Add NetBird API token
kubectl create namespace netbird
kubectl -n netbird create secret generic netbird-mgmt-api-key --from-literal=NB_API_KEY=$(cat ~/nb-pat.secret)
- (Recommended) Create a
values.yamlfile, checkhelm show values netbirdio/kubernetes-operatorfor more info. - Install using
helm install --create-namespace -f values.yaml -n netbird netbird-operator netbirdio/kubernetes-operator. - (Recommended) Check pod status using
kubectl get pods -n netbird. - (Optional) Create an
exposed-nginx.yamlfile to create a Nginx service for testing. - (Optional) Apply the Nginx service:
kubectl apply -f exposed-nginx.yaml
Learn more about the values.yaml options here and Granting controller access to NetBird Management.
Uninstallation
Important
Most operator resources are annotated with finalizers, attempting to delete the namespace will result in hanged deletion.
- (If ingress mode is enabled) Remove all instances of
netbird.io/exposeannotation on Services. - Run
helm uninstall -n netbird netbird-operator. - Wait for all deletion jobs to finish.
Version
We have developed and executed tests against Kubernetes v1.31, but it should work with most recent Kubernetes version.
Latest operator version: v0.1.1.
Tested against:
| Distribution | Test status | Kubernetes Version |
|---|---|---|
| Google GKE | Pass | 1.31.5 |
| AWS EKS | Pass | 1.31 |
| Azure AKS | Not tested | N/A |
| OpenShift | Not tested | N/A |
We would love community feedback to improve the test matrix. Please submit a PR with your test results.
Usage
Check the usage of usage.md and examples.
Contributing
Prerequisites
To be able to develop this project, you need to have the following tools installed:
- Git.
- Make.
- Go programming language.
- Docker CE.
- Kubernetes cluster (v1.16+). KIND is recommended.
- Kubebuilder.
Running tests
Running unit tests
make test
Running E2E tests
kind create cluster # If not already created, you can check with `kind get clusters`
make test-e2e