Directories
¶
| Path | Synopsis |
|---|---|
|
Package alloy provides business logic for Grafana Alloy configuration and installation.
|
Package alloy provides business logic for Grafana Alloy configuration and installation. |
|
labels
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0 |
|
blocknode
Package blocknode implements the business logic layer for block-node intents.
|
Package blocknode implements the business logic layer for block-node intents. |
|
teleport
Package teleport implements the business logic layer for teleport intents.
|
Package teleport implements the business logic layer for teleport intents. |
|
Package consensus holds contracts shared across the consensus-node tracks: the daemon-side execute-phase workflow (internal/daemon/consensus, epic #502) and the CLI-side recover/self-upgrade stories (epic #500).
|
Package consensus holds contracts shared across the consensus-node tracks: the daemon-side execute-phase workflow (internal/daemon/consensus, epic #502) and the CLI-side recover/self-upgrade stories (epic #500). |
|
network
Package network hosts the daemon's host-network monitors.
|
Package network hosts the daemon's host-network monitors. |
|
privexec
Package privexec is the daemon's privileged-exec delegation seam.
|
Package privexec is the daemon's privileged-exec delegation seam. |
|
probes
Package probes holds the Kubernetes-specific leaf probe(s) that cannot live in the lightweight pkg/daemonkit because they pull in k8s.io/client-go.
|
Package probes holds the Kubernetes-specific leaf probe(s) that cannot live in the lightweight pkg/daemonkit because they pull in k8s.io/client-go. |
|
Package migration provides a framework for managing software migrations.
|
Package migration provides a framework for managing software migrations. |
|
firewall
Package firewall implements the node-agnostic `solo-provisioner network firewall` scope: the `inet weaver-host-firewall` nftables table that protects the bare-metal host (SSH/mgmt allowlist, ICMP policy, in-cluster host-service ports).
|
Package firewall implements the node-agnostic `solo-provisioner network firewall` scope: the `inet weaver-host-firewall` nftables table that protects the bare-metal host (SSH/mgmt allowlist, ICMP policy, in-cluster host-service ports). |
|
nftexec
Package nftexec holds the `nft` commands shared by the host firewall and workload policy managers.
|
Package nftexec holds the `nft` commands shared by the host firewall and workload policy managers. |
|
nftexec/nfttest
Package nfttest provides a fake nft binary for the nftexec and manager tests.
|
Package nfttest provides a fake nft binary for the nftexec and manager tests. |
|
policy
Package policy implements the `solo-provisioner network policy` verb family: it renders per-category classification / ACL rules into the `inet weaver-workload-policy` nftables table (the workload traffic plane), maintains a per-policy registry under /etc/solo-provisioner/policies/, and applies the full rendered chain to the live kernel with `nft -f` while atomically persisting /etc/solo-provisioner/network-weaver-workload-policy.nft.
|
Package policy implements the `solo-provisioner network policy` verb family: it renders per-category classification / ACL rules into the `inet weaver-workload-policy` nftables table (the workload traffic plane), maintains a per-policy registry under /etc/solo-provisioner/policies/, and applies the full rendered chain to the live kernel with `nft -f` while atomically persisting /etc/solo-provisioner/network-weaver-workload-policy.nft. |
|
reassert
Package reassert restores weaver's nft tables and the $EGRESS HTB hierarchy after a third party removes them.
|
Package reassert restores weaver's nft tables and the $EGRESS HTB hierarchy after a third party removes them. |
|
shape
Package shape implements tc HTB hierarchy persistence and the `network shape` CLI verb.
|
Package shape implements tc HTB hierarchy persistence and the `network shape` CLI verb. |
|
unitconv
Package unitconv holds the boot-unit convergence shared by the network planes that replay their state via a systemd oneshot.
|
Package unitconv holds the boot-unit convergence shared by the network planes that replay their state via a systemd oneshot. |
|
Package rsl (Runtime State Layer) bridges live cluster reality, persisted application state, and operator-supplied inputs into a single, deterministic effective value for every configurable field.
|
Package rsl (Runtime State Layer) bridges live cluster reality, persisted application state, and operator-supplied inputs into a single, deterministic effective value for every configurable field. |
|
Package selfupgrade defines the on-disk contracts for the daemon's binary self-upgrade protocol (epic #500): the self-upgrade.yaml state file and the .bak archived-binary naming convention.
|
Package selfupgrade defines the on-disk contracts for the daemon's binary self-upgrade protocol (epic #500): the self-upgrade.yaml state file and the .bak archived-binary naming convention. |
|
Package state provides cluster state discovery functions.
|
Package state provides cluster state discovery functions. |
|
Package tomlx provides utilities for managing TOML configuration files.
|
Package tomlx provides utilities for managing TOML configuration files. |
|
Package ui provides the Bubble Tea TUI layer for solo-provisioner.
|
Package ui provides the Bubble Tea TUI layer for solo-provisioner. |
|
prompt
Package prompt provides interactive CLI prompts for solo-provisioner commands.
|
Package prompt provides interactive CLI prompts for solo-provisioner commands. |
Click to show internal directories.
Click to hide internal directories.