The commander-agent module

The module is a service component that ensures the proper functioning of the commander module.

Requirements

The module requires Commander v1.17.0 or newer. Starting from that version Commander reports support for strict tunnel authentication and presents the agent service token in tunnel requests.

With an older Commander the agent does not establish the tunnel: such a managing side cannot present credentials, and proxying requests anonymously is not allowed. In this state the agent pod keeps restarting, and the container log names the reason and the required Commander version. Upgrading Commander restores the agent without any action inside the managed cluster.