atenet

atenet

atenet is a combined daemon for all networking functionality.

• DNS server for ATE Actor resolution: atenet dns
• Lightweight mTLS proxy sidecar for demonstrating using ATE identities. atenet sidecar
• Envoy control plane for programming ATE resolution. atenet router

This is built as a single binary for convenience in the prototyping.

Cluster deployment

router

(Note: this deployment model combines Envoy dataplane with the router. This will likely be split in the future for better scalability.)

• atenet router will be deployed as Deployment and Service
• Deployment will contain:
  • Envoy
  • atenet router
• Service will expose:
  • Envoy port 80 and 443.

RBAC permissions:

• read, list on ActorTemplate

dns

• atenet dns will be deployed as:

  • Deployment
  • Service exposing tcp and udp 53

• read, list on kube-system services

• read, list on ate-system services

testing

hack/run-test.sh will execute a local smoke test with a fake ATE API server. This does not require any cluster and uses the fake ATE api server.