 Andrei Kvapil
|
53ecd21f4e
fix(topology): also reject allowed-location-ips that exactly match allowed IPs
|
hai 3 meses |
|
Andrei Kvapil
|
172d864e5a
refactor(topology): clarify allowed location IP overlap condition
|
hai 3 meses |
|
Andrei Kvapil
|
810d102c7f
fix(topology): allow allowed-location-ips to contain node IPs
|
hai 4 meses |
 squat
|
04ecc6f039
fix: golangci-lint warnings
|
hai 3 meses |
|
Lucas Servén Marín
|
12ccb65edb
pkg/mesh: avoid NAT-ing packets to service CIDRs
|
%!s(int64=3) %!d(string=hai) anos |
 leonnicolas
|
0dfb744630
kgctl connect (#269)
|
%!s(int64=4) %!d(string=hai) anos |
|
Lucas Servén Marín
|
df8d2cb68f
pkg/mesh: respect allowed location IPs in peers
|
%!s(int64=4) %!d(string=hai) anos |
|
leonnicolas
|
6a696e03e7
migrate to golang.zx2c4.com/wireguard/wgctrl (#239)
|
%!s(int64=4) %!d(string=hai) anos |
 leonnicolas
|
3de4bf527b
pkg/mesh/routes.go: add iptbales forward allow rules for segment.
|
%!s(int64=4) %!d(string=hai) anos |
|
leonnicolas
|
31ffaa0e71
pkg/: FEATURE: support allowed IPs outside a cluster
|
%!s(int64=5) %!d(string=hai) anos |
 Julien Viard de Galbert
|
2ac000c68a
Nat to nat (#146)
|
%!s(int64=5) %!d(string=hai) anos |
|
Lucas Servén Marín
|
d1948acd77
pkg/mesh: fix panic in graph
|
%!s(int64=5) %!d(string=hai) anos |
|
leonnicolas
|
9d10d4a3de
FEATURE: allow disabling private IPs
|
%!s(int64=5) %!d(string=hai) anos |
|
leonnicolas
|
3a201ba0fa
Nodes without private IPs
|
%!s(int64=5) %!d(string=hai) anos |
|
Lucas Servén Marín
|
45cedbb84a
pkg/*: allow kgctl to compile for other OSes
|
%!s(int64=5) %!d(string=hai) anos |
|
Lucas Servén Marín
|
116fb7337a
pkg/k8s: enable peers to use DNS names
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
0a10dc921c
pkg/k8s/apis: support for preshared keys in peers
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
b668c1ec3e
pkg/iptables: enable simultaneous ipv4 and ipv6
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
7051b9fe29
pkg/mesh: enable outgoing NAT to WAN
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
b54b31b699
pkg/mesh: enable generating config without peer
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
24d7c27901
pkg/mesh,docs: document and fix keepalive logic
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
aa376ff0d1
pkg/mesh,pkg/wireguard: allow DNS name endpoints
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
134cbe90be
pkg/route,pkg/mesh: replace NAT with ip rules
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
4857d10da1
pkg/iptables: clean up, remove NAT
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
2603cd50db
pkg/mesh: fix ip allocator helper
|
%!s(int64=6) %!d(string=hai) anos |
 Francis Nguyen
|
6de0f9805a
Define WireGuard PersistentKeepAlive via Annotation (#31)
|
%!s(int64=6) %!d(string=hai) anos |
|
Lucas Servén Marín
|
81d6077fc2
manifests,pkg/encapsulation: Flannel compatibility
|
%!s(int64=7) %!d(string=hai) anos |
|
Lucas Servén Marín
|
cd6eeeb1e7
pkg/{encapsulation,mesh}: abstract encapsulation
|
%!s(int64=7) %!d(string=hai) anos |
|
Lucas Servén Marín
|
8ed1b549d1
pkg/mesh: edge case external = internal
|
%!s(int64=7) %!d(string=hai) anos |
|
Lucas Servén Marín
|
35390054ba
pkg: deduplicate peer IP addresses
|
%!s(int64=7) %!d(string=hai) anos |
