Add internal ipam, use in ip.cni, support ip.netns on backend net, atomic nft ruleset swap - #1106

Merged

cgalibern merged 17 commits into

opensvc:mainfrom

cvaroqui:daemon-hb-name

Sep 7, 2026

Commits on Sep 3, 2026

Read a table back after making it, and print the priority asked for
cvaroqui
committed
7164e1e
Put om's firewall rules in a table of om's own
cvaroqui
committed
734ba97
Stop telling podman where a cni configuration it never reads is
cvaroqui
committed
23680aa
Hand a podman container the resolver it was refused
cvaroqui
committed
677c93c
Say what a container searches a shortname in
cvaroqui
committed
a43a731
Apply the firewall rules as one transaction
cvaroqui
committed
9bbc2a0
Say what a network left without a local address costs
cvaroqui
committed
5b1071d
Allocate the addresses of an om network
cvaroqui
committed
733b6cd
Draw the address of an ip.netns from an om network
cvaroqui
committed
e5e92e4
Record what naming a network in an ip.netns does
cvaroqui
committed
e53a214
Adopt the addresses a node already holds
cvaroqui
committed
fcf6334
Give an ip.cni the address om allocated
cvaroqui
committed
d352d72
Stop cleaning up after an allocator that no longer runs
cvaroqui
committed
ba18737
Drop from the plugin record what om now holds
cvaroqui
committed
e208192
Release an address a failed start would have kept
cvaroqui
committed
6c2dfc1
Say when a network has nothing for an ip resource
cvaroqui
committed
aa93168
Match a firewall device by name, not by index
cvaroqui
committed
adf739c