-
-
Notifications
You must be signed in to change notification settings - Fork 782
feat: talosctl debug
#12392
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: talosctl debug
#12392
Conversation
ce722ef to
97f4bb2
Compare
97f4bb2 to
431f4bc
Compare
95c259b to
79cd19e
Compare
|
@smira when you get a sec can you TAL and see if you have any early feedback/ideas? |
3da742a to
4d9c6ca
Compare
internal/app/machined/internal/server/v1alpha1/v1alpha1_debug.go
Outdated
Show resolved
Hide resolved
internal/app/machined/internal/server/v1alpha1/v1alpha1_debug.go
Outdated
Show resolved
Hide resolved
5e0b486 to
f9893d7
Compare
Instead of defaulting to one2many, list explicitly one2many supported APIs. The idea is that any new API will only be "normal" gRPC API, so we can flip the switch, and consider one2many APIs as "legacy". Extracted from siderolabs#12392 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
Instead of defaulting to one2many, list explicitly one2many supported APIs. The idea is that any new API will only be "normal" gRPC API, so we can flip the switch, and consider one2many APIs as "legacy". Extracted from siderolabs#12392 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
Instead of defaulting to one2many, list explicitly one2many supported APIs. The idea is that any new API will only be "normal" gRPC API, so we can flip the switch, and consider one2many APIs as "legacy". Extracted from siderolabs#12392 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
f0e025f to
f480d75
Compare
These new APIs only support one2one proxying, so they don't have any hacks, and look as regular gRPC APIs. Old APIs are deprecated, but still supported. Implement client-side multiplexing in `talosctl`, provide fallback to old APIs for legacy Talos versions. New APIs include removing an image, importing an image. Extracted from siderolabs#12392 Co-authored-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
These new APIs only support one2one proxying, so they don't have any hacks, and look as regular gRPC APIs. Old APIs are deprecated, but still supported. Implement client-side multiplexing in `talosctl`, provide fallback to old APIs for legacy Talos versions. New APIs include removing an image, importing an image. Extracted from siderolabs#12392 Co-authored-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
f480d75 to
9fc874c
Compare
These new APIs only support one2one proxying, so they don't have any hacks, and look as regular gRPC APIs. Old APIs are deprecated, but still supported. Implement client-side multiplexing in `talosctl`, provide fallback to old APIs for legacy Talos versions. New APIs include removing an image, importing an image. Extracted from siderolabs#12392 Co-authored-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
9fc874c to
a4a63e2
Compare
3b97cbe to
dac9c15
Compare
This comment was marked as resolved.
This comment was marked as resolved.
dac9c15 to
214cc09
Compare
214cc09 to
457bf1b
Compare
457bf1b to
ceeb029
Compare
smira
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉
| } | ||
|
|
||
| // TestRunAlpine tests running a simple alpine container via DebugService. | ||
| func (suite *DebugSuite) TestRunAlpine() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I wonder if we can use this for all other tests that does nsenter
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yep, we could I guess - I can create an issue to transform this, we might still nsenter due to different mount namespace
frezbo
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🆒
This implements a way to run a debug container with a provided image on the node. The container runs with privileged profile, allowing to issue debugging commands (e.g. using some advanced network tools) to troubleshoot a machine. Signed-off-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
ceeb029 to
d43a01c
Compare
|
/m |
Fixes #8720