Tim Gross 76009d89af tproxy: networking hook changes (#20183) ...

When `transparent_proxy` block is present and the network mode is `bridge`, use
a different CNI configuration that includes the `consul-cni` plugin. Before
invoking the CNI plugins, create a Consul SDK `iptables.Config` struct for the
allocation. This includes:

* Use all the `transparent_proxy` block fields
* The reserved ports are added to the inbound exclusion list so the alloc is
  reachable from outside the mesh
* The `expose` blocks and `check` blocks with `expose=true` are added to the
  inbound exclusion list so health checks work.

The `iptables.Config` is then passed as a CNI argument to the `consul-cni`
plugin.

Ref: https://github.com/hashicorp/nomad/issues/10628

2024-04-04 17:01:07 -04:00

..

envoy_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

envoy.go

tproxy: networking hook changes (#20183)

2024-04-04 17:01:07 -04:00