Skip to content

Netbird VPN SSH replacement - #239

Draft
craddm wants to merge 78 commits into
alan-turing-institute:mainfrom
craddm:netbird-testing
Draft

Netbird VPN SSH replacement#239
craddm wants to merge 78 commits into
alan-turing-institute:mainfrom
craddm:netbird-testing

Conversation

@craddm

@craddm craddm commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Testing out Netbird VPN.

  1. one-way comms to FRIDGE API works
  2. two-way comms works, can call back from netbird pod to a "home-TRE"
  3. slight problem, can't call back to services running on my work Mac, as app firewall blocks it, but only a problem for testing

Closes #238

craddm added 27 commits December 15, 2025 11:39
@craddm
Add netbird vpn agent component
ed1289a
@craddm
Merge branch 'main' into netbird-testing
e29e338
@craddm
use config secret for setup key
e74ab87
@craddm
Merge branch 'main' into netbird-testing
1336cd6
@craddm
Merge branch 'main' into netbird-testing
6ef16e0
@craddm
add haproxy version to enums
41a835c
@craddm
switch to using haproxy
199bfb3
@craddm
add netbird field to pulumi yaml
9ff0bcc
@craddm
add tre_out variable
d5363ea
@craddm
add netbird version to init
7f238de
@craddm
use pinned netbird version
dd804de
@craddm
Use full pulumi syntax for deployment
d630164
@craddm
use nested netbird object config
183da99
@craddm
add network policy for the vpn server
d9fa512
@craddm
use objectmetaargs for custom resources
ea6390a
@craddm
Use stable pvc for netbird, add internal svc
c85270e
@craddm
fix service spec
7095320
@craddm
add rule for remote test deployment
ee51f69
@craddm
initial framework of instructions for netbird configuration
5dd9d23
@craddm
add notes to CNP definitions
48ed417
@craddm
manually create a service/endpoint for the fridge api
b46edec
@craddm
add some explanatory notes, and parse config value for fridge api add…
69c0634 
…ress
@craddm
allow egress to new fridge api service rather than hardcoded ip
3c7bff8
@craddm
tighten haproxy config, add isolated k8s service
900c9a9
@craddm
add comment explaining internal service for isolated k8s
0a014ec
@craddm
add explicit containerport definition for haproxy
99f0a56
@craddm
change names of front and backend for easier readability
d7af015
@craddm craddm moved this from Todo to In Progress in AIRR-BRIDGE Jul 24, 2026
craddm added 30 commits September 1, 2026 14:27
@craddm
add further info about netbird connections
e90ee35
@craddm
add access policy figure
3295904
@craddm
reword and reorganise
c014409
@craddm
Add figure for access policies
d8c8bf6
@craddm
use full custom cnp
3e73660
@craddm
remove commented code
f18e5c6
@craddm
add additional fields for netbird
1d3c453
@craddm
remove unused imports
16947ac
@craddm
use file reference
a90b677
@craddm
set up simpler management of netbird config options
53998e1
@craddm
use optional object for additional netbird config fields
4431577
@craddm
uri, not url
77838d8
@craddm
uri not url
6a80ea8
@craddm
additional netbird instructions
76397de
@craddm
switch back to URL
cf87e5a
@craddm
url not uri
bc68b82
@craddm
Remove SSH instructions
4626d43
@craddm
Add Netbird prerequisite
ff4619a
@craddm
Add link to netbird page
7d9ec9d
@craddm
add netbird page to ToC
2949487
@craddm
Remove initial paragraph
39daff4
@craddm
fix link
c97a9b7
@craddm
remove SSH jumphost network policies
42c55b6
@craddm
remove unused SSH IP objects
05ab14e
@craddm
delete fridge api jumpbox component
50c3fd6
@craddm
Remove jumpbox from modules
c1bf8e9
@craddm
Remove api_jumpbox related ingress elements
dcba27b
@craddm
Remove openssh server from enums
f8dd650
@craddm
remove api jumpbox CNPs
1632c85
@craddm
remove api jumpbox from main
1ee863f
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@craddm craddm

Labels

None yet

Projects

AIRR-BRIDGE
Status: In Progress

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Replacing SSH tunnels with Netbird

1 participant

@craddm