Skip to content

Allow address-only NLB backend selection - #34

Draft
scotwells wants to merge 1 commit into
codex/nlb-backend-addresses-apifrom
codex/nlb-addresses-without-selector-api
Draft

scotwells wants to merge 1 commit into
codex/nlb-backend-addresses-apifrom
codex/nlb-addresses-without-selector-api

Conversation

@scotwells

Copy link
Copy Markdown
Collaborator

Summary

Allow an NLB rule to specify backend IPv6 addresses without relying on attachment labels. backendSelector may be omitted only when backendAddresses is present; a rule with neither field remains invalid.

This retains the VPC boundary: Galactic must match each address against a VPCAttachment whose authoritative status.vpc equals the rule's vpcRef.

Stacked on #33.

Verification

  • task build
  • task lint
  • go test ./api/v1alpha1 -count=1 (admission envtest runs when KUBEBUILDER_ASSETS is configured)

privateip added a commit that referenced this pull request Oct 12, 2026
PR #34 adds rule_admission_envtest_test.go too, so the two would
conflict. Also state on the field that ratcheting needs Kubernetes 1.30
or later, and what an older API server does instead.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant