feat: k8s reverse tunnel proxy for remote API access#654
Merged
krystiancastai merged 17 commits intomainfrom Mar 10, 2026
Merged
feat: k8s reverse tunnel proxy for remote API access#654krystiancastai merged 17 commits intomainfrom
krystiancastai merged 17 commits intomainfrom
Conversation
Change default database name from kvisor to metrics consistently Co-authored-by: Gyorgy Ruck <gyorgy@cast.ai>
…ID) for umbrella chart (#653) Add support for global.castai.apiURL, global.castai.grpcURL, and global.castai.clusterID in helm templates, enabling the castai-umbrella chart to override kvisor's values centrally. - Extract kvisor.apiGrpcAddr and kvisor.apiURL helpers to deduplicate coalesce+dig logic across agent.yaml and controller.yaml - Modify kvisor.clusterIDEnv to resolve global.castai.clusterID inline, preserving existing validation against clusterIdConfigMapKeyRef/SecretKeyRef - Align kvisor.cloudProvider helper to use the same inline style - Priority order: global value > local value > default - Add 13 unit tests covering all fallback scenarios
krystiancastai
force-pushed
the
REP-1940-v2
branch
from
44cea55 to
8ce936c
Compare
krystiancastai
force-pushed
the
REP-1940-v2
branch
from
f330c2b to
51338a8
Compare
patrickpichler
approved these changes
Mar 9, 2026
krystiancastai
force-pushed
the
REP-1940-v2
branch
from
b2fb30a to
a59168a
Compare
krystiancastai
force-pushed
the
REP-1940-v2
branch
from
a59168a to
7c28300
Compare
krystiancastai
force-pushed
the
REP-1940-v2
branch
from
8541355 to
ad5a9c3
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description:
Enables CAST AI backend to query the Kubernetes API of connected clusters
without requiring direct network access. The kvisor controller establishes
an outbound gRPC connection to CAST AI and forwards incoming HTTP requests
to the local k8s API using a dedicated restricted ServiceAccount, streaming
responses back through the tunnel.
Key points: