mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-11 17:04:22 -05:00
cfcc0898b2
This is the first step in our migration off of konnectivity. Before node-to-node encryption we used konnectivity to route some KubeAPI to kubelet traffic over the pod network which then would be encrypted. Since we enabled node-to-node encryption this has no security upsides anymore. Note that we still deploy the konnectivity agents via helm and still have the load balancer for konnectivity. In the following releases we will remove both.
29 lines
784 B
Python
29 lines
784 B
Python
load("@io_bazel_rules_go//go:def.bzl", "go_library")
|
|
load("//bazel/go:go_test.bzl", "go_test")
|
|
|
|
go_library(
|
|
name = "resources",
|
|
srcs = [
|
|
"auditpolicy.go",
|
|
"resources.go",
|
|
],
|
|
importpath = "github.com/edgelesssys/constellation/v2/bootstrapper/internal/kubernetes/k8sapi/resources",
|
|
visibility = ["//bootstrapper:__subpackages__"],
|
|
deps = [
|
|
"//internal/kubernetes",
|
|
"@io_k8s_apimachinery//pkg/apis/meta/v1:meta",
|
|
"@io_k8s_apiserver//pkg/apis/audit/v1:audit",
|
|
],
|
|
)
|
|
|
|
go_test(
|
|
name = "resources_test",
|
|
srcs = ["auditpolicy_test.go"],
|
|
embed = [":resources"],
|
|
deps = [
|
|
"//internal/kubernetes",
|
|
"@com_github_stretchr_testify//assert",
|
|
"@com_github_stretchr_testify//require",
|
|
],
|
|
)
|