sessioncheck

Overview ¶

Command sessioncheck is one session's round trip as a consumer sees it: mint a grant, Clone a named session, speak HTTP to the fiber over the endpoint Clone returned, Park it, Clone the same session again (a RESUME) and check the counter survived, then Release with discard.

It is the Kubernetes acceptance's check that a fiber behind a Pod IP is reachable from another Pod, which the conformance suite (run from the host) cannot dial. The template must be the reference zygote in --http mode.

sessioncheck -target 10.244.0.9:8484 -node-id conform-gvisor-grant \
    -issuer-key /tmp/issuer-key.json -issuer http://grant-issuer.fiberd-system.svc:8080 \
    -isolation UNTRUSTED -want-scheme tcp