matsandClaude Sonnet 5.5
4d38945d94
The runtime can now take ClientGroup, BlockList and DNSZone objects (fancydns.k6n.net/v1alpha1) from a cluster with -kube, from a pod's service account or a kubeconfig alike. internal/kubesource watches them with dynamic informers, converts and validates each object on its own, and publishes an immutable snapshot. A bad object is skipped and keeps its last good version, so one broken edit cannot remove a running policy; an invalid merged config is dropped whole. The last snapshot is saved so a restart without apiserver access still serves. config.Store gains an overlay: Base() is what the YAML says, Get() is base plus cluster objects. Everything that writes the config back (mutateConfig, SetAdminAddr, the settings editor) now starts from Base(), otherwise cluster objects would be copied into the file and shadow their own objects. YAML wins every name collision. putACL and toggleBlocklist refuse to edit cluster-owned objects. BlockList has no path field and refuses file:// URLs so a namespaced object cannot pick files the runtime reads or writes. DNSZone is rendered through the zone writer's own prove-by-reparse step, with the SOA serial taken from metadata.generation so every replica renders identical bytes. qlog: Flush reset the pending slice to [:0], so entries logged while it was still storing the batch were appended over the same backing array. The race detector found it through the new Kubernetes integration test. pending is now set to nil, with a regression test that fails without the change. CRD manifests, RBAC and examples are in deploy/k8s/crds; tests pin the schemas to the Go spec structs so the two cannot drift. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
73 lines
3.1 KiB
AMPL
73 lines
3.1 KiB
AMPL
module git.k8s-git-k6n.net/mats/fancy-dns
|
|
|
|
go 1.27.1
|
|
|
|
require (
|
|
github.com/alicebob/miniredis/v2 v2.39.0
|
|
github.com/coreos/go-oidc/v3 v3.21.0
|
|
github.com/miekg/dns v1.1.73
|
|
github.com/prometheus/client_golang v1.24.1
|
|
github.com/redis/go-redis/v9 v9.22.0
|
|
go.etcd.io/bbolt v1.5.0
|
|
golang.org/x/net v0.59.0
|
|
golang.org/x/oauth2 v0.36.0
|
|
gopkg.in/yaml.v3 v3.0.1
|
|
k8s.io/apimachinery v0.37.0
|
|
k8s.io/client-go v0.37.0
|
|
)
|
|
|
|
require (
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/emicklei/go-restful/v3 v3.13.0 // indirect
|
|
github.com/fxamacker/cbor/v2 v2.9.1 // indirect
|
|
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
|
|
github.com/go-logr/logr v1.4.3 // indirect
|
|
github.com/go-openapi/jsonpointer v1.0.0 // indirect
|
|
github.com/go-openapi/jsonreference v1.0.0 // indirect
|
|
github.com/go-openapi/swag v0.27.1 // indirect
|
|
github.com/go-openapi/swag/cmdutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/conv v0.27.1 // indirect
|
|
github.com/go-openapi/swag/fileutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/jsonutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/loading v0.27.1 // indirect
|
|
github.com/go-openapi/swag/mangling v0.27.1 // indirect
|
|
github.com/go-openapi/swag/netutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/pools v0.27.1 // indirect
|
|
github.com/go-openapi/swag/stringutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/typeutils v0.27.1 // indirect
|
|
github.com/go-openapi/swag/yamlutils v0.27.1 // indirect
|
|
github.com/google/gnostic-models v0.7.0 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/prometheus/client_model v0.6.2 // indirect
|
|
github.com/prometheus/common v0.70.1 // indirect
|
|
github.com/prometheus/procfs v0.21.1 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/x448/float16 v0.8.4 // indirect
|
|
github.com/yuin/gopher-lua v1.1.1 // indirect
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
|
golang.org/x/sys v0.48.0 // indirect
|
|
golang.org/x/term v0.46.0 // indirect
|
|
golang.org/x/text v0.42.0 // indirect
|
|
golang.org/x/time v0.15.0 // indirect
|
|
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
|
|
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
|
|
gopkg.in/inf.v0 v0.9.1 // indirect
|
|
k8s.io/api v0.37.0 // indirect
|
|
k8s.io/klog/v2 v2.140.0 // indirect
|
|
k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad // indirect
|
|
k8s.io/utils v0.0.0-20260626114624-be93311217bd // indirect
|
|
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
|
|
sigs.k8s.io/randfill v1.0.0 // indirect
|
|
sigs.k8s.io/structured-merge-diff/v6 v6.4.2 // indirect
|
|
sigs.k8s.io/yaml v1.6.0 // indirect
|
|
)
|