Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Perform challenge callbacks into a node #15125

Merged
merged 4 commits into from
May 7, 2023
Merged

Perform challenge callbacks into a node #15125

merged 4 commits into from
May 7, 2023

Commits on May 6, 2023

  1. Perform challenge callbacks into a node 

    In order to verify that the caller is running on the specified node,
we source the expected IP address from the cloud, and require that the
node set up a simple challenge/response server to answer requests.

Because the challenge server runs on a port outside of the nodePort
range, this also makes it harder for pods to impersonate their host
nodes - though we do combine this with TPM and similar functionality
where it is available.
    @justinsb
    justinsb committed May 6, 2023
    Configuration menu
    Copy the full SHA
    c67f895 View commit details
    Browse the repository at this point in the history

  2. Add generated code

    @justinsb
    justinsb committed May 6, 2023
    Configuration menu
    Copy the full SHA
    79ca260 View commit details
    Browse the repository at this point in the history

  3. Update expected test output

    @justinsb
    justinsb committed May 6, 2023
    Configuration menu
    Copy the full SHA
    bd956f2 View commit details
    Browse the repository at this point in the history

  4. Only use node challenge on hetzner 

    DigitalOcean (and others) will follow shortly.

Also create a method for CloudProvider, so that we are more ambivalent
towards bootstrapping methods.
    @justinsb
    justinsb committed May 6, 2023
    Configuration menu
    Copy the full SHA
    c89f434 View commit details
    Browse the repository at this point in the history