Contributor
Gaurav Genani
View Code

Expose all active configurations and CLI improvements.

Mentors
Paul Chaignon, André Martins
Organization
Cilium

Currently, cilium-agent CLI exposes only a subset of daemon configurations. However, most of the applied configurations can be seen by viewing the ConifgMap in the Kubernetes cluster. The main issue is that ConfigMap does not stay reconciled with the active daemon configurations. This means that if we change any configuration in the ConfigMap, it is not immediately reflected in Cilium. Cilium needs to be restarted to apply those configurations. Depending on kernel configurations, It may happen that ConfigMap and daemon both show different active configurations. So, this project aims at improving the existing cilium config command to expose all active configurations.

Add subcommand :

  1. cilium encrypt status, which displays information on the current status of the IPSec configurations
  2. cilium encrypt flush, which flushes the current XFRM States of the node.