Handle A and AAAA records TTL properly in dnscache #187

mreiger · 2024-08-29T09:43:25Z

No description provided.

…nto 186-dns-based-cwnps-not-reliable-on-hostnames-with-constantly-changing-ips

…he rules to make sorting work

pkg/dns/dnscache.go

pkg/nftables/networkpolicy_test.go

pkg/dns/dnscache.go

…nto 186-dns-based-cwnps-not-reliable-on-hostnames-with-constantly-changing-ips

Gerrit91

Another set of comments, I hope they are useful.

api/v1/clusterwidenetworkpolicy_types.go

main.go

pkg/dns/dnscache.go

pkg/nftables/util.go

pkg/dns/dnscache.go

First stab at changing dnscach datastructure and cache update handling

7ca8165

mreiger linked an issue Aug 29, 2024 that may be closed by this pull request

DNS-based CWNPs not reliable on hostnames with constantly changing IPs #186

Closed

mreiger and others added 28 commits August 29, 2024 12:06

Fix linter errors

478a990

Fix remaining linter error

bafef1a

Forgot to initialize map

2d8f679

Another uninitialized map

8df351c

Fix nftables generation: Only add IP port of RR to cache

c05d4f1

Try to fix expiration date

42d089e

Second attempt to fix expiration time

7b87dc0

Try keep the CRD stable

a814da6

Add forgotten error handling

4c406fd

Try and fix bug where only one rule's FQDNState would be shown

dddc7af

Fix forgotten initialisation of map

c67aa1c

Merge master

49f25e5

get shoot client to dns cache for handling state configmap

53ecc4b

Merge branch 'master' of github.com:metal-stack/firewall-controller i…

15578a5

…nto 186-dns-based-cwnps-not-reliable-on-hostnames-with-constantly-changing-ips

Implement writing to state configmap

fabc726

pacify linter

8215f60

update setup-gcloud

559f37d

Try and initialize the configmap correctly

9b36afb

Try different approach for initialising dns cache from configmap

ea9bfb2

properly check for existing configmap

2064bfa

Actually try to write dns cache to configmap

e14c8de

Do not try to write nil cache to configmap; debug output

e65d682

Try and turn on debug logging

febbaf6

remove accidental package definition

6069a05

Try to fix JSON marshaling

70ac71c

Export fields so the json library can read them

bffdffb

Try to fix configmap creation

9f16a98

Avoid writing to nil map

c9ebc62

iljarotar and others added 5 commits August 12, 2025 16:27

also sort nftables ingress and egress rules

c26d5b7

sort render ip set ips as well

3b38b23

Try splitting multi-line accept log rules only after assembling all t…

86a79a2

…he rules to make sorting work

adjust tests

d4d9c71

Fixes to tests

bac53b1