Azure / kube-egress-gateway / 37510584065

77%

Build Type

push

github

Committed by web-flow

Commit Message

Restrict CNI manager gRPC endpoint (#1429)

* Restrict CNI manager gRPC endpoint

Bind the privileged gRPC API to node loopback and move Kubernetes probes to a dedicated HTTP endpoint. Report gRPC and CNI configuration readiness accurately, and exit on unexpected serving failures.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Use dedicated CNI manager probe port

Move the cni-manager HTTP health probe default to port 20081 to align with the managed AKS static-egress port allocation and avoid common host-network port conflicts.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Clean up gRPC health state tracking

Use the gRPC health server as the source of truth for health and readiness checks and shut it down instead of maintaining a separate serving flag.

This removes duplicated state and keeps probe behavior aligned with the server lifecycle.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Coverage Stats

22 of 57 new or added lines in 2 files covered. (38.6%)

1 existing line in 1 file now uncovered.

3350 of 4347 relevant lines covered (77.06%)

0.78 hits per line