Add cni/secure-bridge to isolate host network

2022-09-09 00:35:37 +02:00
parent 1df9701a74
commit d372e37d1a
7 changed files with 191 additions and 7 deletions
--- a/internal/environment/nomad_environment.go
+++ b/internal/environment/nomad_environment.go
@ -177,7 +177,7 @@ func (n *NomadEnvironment) SetNetworkAccess(allow bool, exposedPorts []uint16) {
 		}
 		// Prefer "bridge" network over "host" to have an isolated network namespace with bridged interface
 		// instead of joining the host network namespace.
-		networkResource.Mode = "bridge"
+		networkResource.Mode = "cni/secure-bridge"
 		for _, portNumber := range exposedPorts {
 			port := nomadApi.Port{
 				Label: strconv.FormatUint(uint64(portNumber), portNumberBase),