kacerrandClaude Opus 5
41fbd5e7e6
Closes out the review-fix campaign. The kvm2 provider was deployed in-cluster and validated against beelink -- the first time any of this code had run against real libvirt rather than the in-memory fake. config/manager/providers_config.yaml ships the kvm2-home entry enabled, since the operator is now running it for real. review/ carries the code review the four H-commits reference, so H1..H4 resolve to something rather than dangling: scope, the seven-chunk sweep, the escalations, the ten deep dives and the final report. .claude/agents carries the two reviewer definitions that produced them. What the validation did not prove is recorded next to what it did: H2's error paths need a body that fails part way through, and a healthy 433 MB download never finishes short, so the unverified libvirtd short-stream behaviour is still open. The kvm2 integration test has also still never been run. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
88 lines
4.2 KiB
YAML
88 lines
4.2 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: providers-config
|
|
namespace: system
|
|
labels:
|
|
app.kubernetes.io/name: egress-proxies-operator
|
|
app.kubernetes.io/managed-by: kustomize
|
|
data:
|
|
# Mounted at /etc/proxy-operator/providers.yaml (--providers-config).
|
|
# The default ships only the kubernetes-pod provider so the operator runs
|
|
# out of the box; add gcp entries (type: gcp, gcp.project: ...) or kvm
|
|
# entries (type: kvm, hosts reached over SSH) for real egress fleets —
|
|
# see config/samples/providers-config.yaml.
|
|
providers.yaml: |
|
|
providers:
|
|
- name: kubernetes
|
|
type: kubernetes
|
|
- name: kvm-home
|
|
type: kvm
|
|
kvm:
|
|
# SSH to each host with the libvirt unix socket forwarded through the
|
|
# connection; nothing to open on the hypervisors beyond sshd. Both
|
|
# files come from the optional kvm-ssh Secret mounted by
|
|
# config/manager/manager.yaml — see docs/kvm-provider.md.
|
|
sshKeyFile: /etc/proxy-operator/kvm/id_ed25519
|
|
knownHostsFile: /etc/proxy-operator/kvm/known_hosts
|
|
# insecureIgnoreHostKey: true # skip host-key checks (not recommended)
|
|
# diskSizeGb: 10 # per-VM overlay; cloud-init grows the root fs into it
|
|
# vendorData: | # extra vendor-data; the qemu-guest-agent bootstrap is merged
|
|
# #cloud-config # into each Proxy's cloud-config, not configured here
|
|
# ...
|
|
images:
|
|
# placement.image names a key here (or is an https:// URL directly).
|
|
# Fetched into each host's pool on first use and cached there as
|
|
# base-<key>.qcow2; do not change an entry while Proxies use it.
|
|
debian-13:
|
|
url: https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-amd64.qcow2
|
|
# sha256: "<64 hex>" # optional; verified after download
|
|
# firmware: uefi # default; "bios" only for images with no EFI partition
|
|
# # (Debian 13 hangs in GRUB under BIOS headless: Debian bug #1111240)
|
|
ubuntu-24.04:
|
|
url: https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img
|
|
machineTypes: # placement.machineType names a key here
|
|
small: {vcpus: 1, memoryMiB: 1024}
|
|
medium: {vcpus: 2, memoryMiB: 2048}
|
|
hosts: # placement.zone names a host; optional with one host
|
|
- name: beelink
|
|
address: beelink.tail8c69c.ts.net:22
|
|
user: novakj # must be in the libvirt group
|
|
bridge: br0 # to a LAN with DHCP; the VM's IP comes from there
|
|
# socket: /var/run/libvirt/libvirt-sock
|
|
# pool: default
|
|
# kvm2 takes the same block shape as kvm: an entry ports by changing
|
|
# type to kvm2 and the block name to kvm2. kvm2 does not adopt domains
|
|
# made by kvm, so delete those Proxies first. It caches its base images
|
|
# under base-<entry>-<key>.<format>, so it downloads its own copy rather
|
|
# than sharing kvm's; budget the pool space. See docs/kvm2-provider.md.
|
|
- name: kvm2-home
|
|
type: kvm2
|
|
kvm2:
|
|
sshKeyFile: /etc/proxy-operator/kvm/id_ed25519
|
|
knownHostsFile: /etc/proxy-operator/kvm/known_hosts
|
|
# insecureIgnoreHostKey: true
|
|
# diskSizeGb: 10
|
|
# installGuestAgent: false
|
|
# vendorData: |
|
|
# #cloud-config
|
|
# ...
|
|
images:
|
|
debian-13:
|
|
url: https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-amd64.qcow2
|
|
# sha256: "<64 hex>"
|
|
# firmware: uefi
|
|
ubuntu-24.04:
|
|
url: https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img
|
|
machineTypes:
|
|
small: {vcpus: 1, memoryMiB: 1024}
|
|
medium: {vcpus: 2, memoryMiB: 2048}
|
|
hosts:
|
|
- name: beelink
|
|
address: beelink.tail8c69c.ts.net:22
|
|
user: novakj
|
|
bridge: br0
|
|
# socket: /var/run/libvirt/libvirt-sock
|
|
# pool: default
|
|
|