Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Extend cilium encrypt to provide information on WireGuard Transparent Encryption. #17274

Closed
h3llix opened this issue Aug 31, 2021 · 4 comments · Fixed by #17684
Closed

Extend cilium encrypt to provide information on WireGuard Transparent Encryption. #17274

h3llix opened this issue Aug 31, 2021 · 4 comments · Fixed by #17684
Assignees
@h3llix
Labels
area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. kind/feature This introduces new functionality.

Comments

@h3llix
Copy link
Contributor

h3llix commented Aug 31, 2021 •
edited

PR #16770 Introduced cilium encrypt status that provides information about the IPsec-based transparent encryption. But this could be extended to provide information on WireGuard too.
@h3llix h3llix added the kind/feature This introduces new functionality. label Aug 31, 2021
@h3llix h3llix changed the title Extend cilium encrypt to provide information about Wireguard Transparent Encryption. Extend cilium encrypt to provide information on WireGuard Transparent Encryption. Aug 31, 2021
@pchaigno pchaigno added the area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. label Aug 31, 2021
@pchaigno
Copy link
Member

@gandro @brb What would make sense to display here? Any source(s) of errors we should highlight? For IPsec, we display the following information.

cilium encrypt status
  Encryption: ipsec
  NodeEncryption: disabled
  Keys in use: 2
  Max. sequence number: 0xffffbd4f/0xffffffff
  Errors: 12
    XfrmInStateProtoError 12

@brb
Copy link
Member

brb commented Sep 3, 2021

  • Encryption: WireGuard
  • NodeEncryption: disabled
  • PubKey base64
  • Number of endpoints

@h3llix
Copy link
Contributor Author

h3llix commented Sep 3, 2021

@pchaigno please assign it to me.

@pchaigno
Copy link
Member

pchaigno commented Sep 3, 2021

@h3llix Don't hesitate to reach... well, you know the drill 😄 Thanks for tackling this!

@h3llix h3llix mentioned this issue Oct 24, 2021
Merged
h3llix added a commit to h3llix/cilium that referenced this issue Oct 26, 2021
@h3llix
cli: add wireguard status to cilium encrypt
fe99ca3 
Fixes: cilium#17274
Signed-off-by: Gaurav Genani <h3llix.pvt@gmail.com>
kkourt pushed a commit that referenced this issue Oct 26, 2021
@h3llix @kkourt
cli: add wireguard status to cilium encrypt
02012cb 
Fixes: #17274
Signed-off-by: Gaurav Genani <h3llix.pvt@gmail.com>
michi-covalent pushed a commit that referenced this issue Oct 27, 2021
@h3llix @michi-covalent
cli: add wireguard status to cilium encrypt
33883a9 
Fixes: #17274
Signed-off-by: Gaurav Genani <h3llix.pvt@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@h3llix h3llix

Labels
area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. kind/feature This introduces new functionality.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add WireGuard status to cilium encrypt. h3llix/cilium
3 participants
@brb @pchaigno @h3llix