默认拒绝
流量必经代理
凭证不进入 Agent Pod
访问过程可审计
节点变更可灰度
数据面故障可回滚

Agent Pod eth0（Fake IP）
  → 默认路由
  → agentcni0 网桥
  → 宿主机 iptables PREROUTING
      ├── UDP/53 → REDIRECT 到 ZeroProxy DNS :18053
      ├── Service CIDR → fwmark 后交回 kube-proxy / 主 CNI
      └── TCP → REDIRECT 到 ZeroProxy :18080
  → 策略匹配、身份校验、凭证注入、审计
  → 目标服务

apiVersion: agent.tke.cloud.tencent.com/v1alpha1
kind: AgentNetworkPolicy
metadata:
  name: coding-agent-network
  namespace: tke-agent-network-real
spec:
  podSelector: {}
  priority: 100
  egress:
    allow:
      - name: public-git
        host: git.example.com
        protocol: tcp
        port: 443
    credential:
      - name: private-git
        host: git.internal.example.com
        header: Authorization
        valueFrom:
          name: zeroproxy-credentials
          key: REPO_TOKEN
    deny:
      - name: production-db
        host: prod-db.internal
  directBypass:
    defaultAction: deny

spec:
  podSelector: {}
  ingress:
    allow:
      - caller: "sa:agent-workloads:planner"
        target: "agent-server"
    deny:
      - caller: "sa:agent-workloads:untrusted-agent"
        target: "agent-server"

169.254.169.254/32
100.64.0.0/10

kubectl get node -o wide
kubectl get pod -A -o wide

kubectl label node <第一台-worker节点名> \\
  tke-agent-network.io/agent-cni-canary=true

kubectl label node <第二台-worker节点名> \\
  tke-agent-network.io/agent-cni-canary=true

kubectl get svc -A \\
  -o jsonpath='{range .items[*]}{.spec.clusterIP}{"\\n"}{end}' \\
  | grep -v -E '^(None|<none>|)$' \\
  | sort -u \\
  | head

192.168.0.0/16

agentCNI:
  serviceCIDRs:
    - <真实 Service CIDR>

{
  "Region": "ap-<region>",
  "ClusterId": "cls-xxxxxxxx",
  "AddonName": "agent-network",
  "AddonVersion": "0.3.0",
  "RawValues": "{\\"agentCNI\\":{\\"serviceCIDRs\\":[\\"<真实 Service CIDR>\\"]}}"
}

kubectl get ds,deploy,pod -n tke-agent-network-real -o wide

agent-cni-installer  1/1 Ready
zeroproxy            1/1 Ready
agent-network-controller 1/1 Ready

credential-upstreams 1/1 Ready

ip addr show agentcni0
ls -l /opt/cni/bin/agent-cni
ls -l /etc/cni/net.d/00-agent-cni.conf
ls -la /var/lib/tke-agent-network/agent-cni/

sysctl \\
  net.ipv4.ip_forward \\
  net.ipv4.conf.all.rp_filter \\
  net.ipv4.conf.default.rp_filter \\
  net.ipv4.conf.agentcni0.rp_filter

net.ipv4.ip_forward = 1
rp_filter = 0

kubectl exec -n tke-agent-network-real ds/agent-cni-installer -- \\
  /agent-cni --doctor \\
  --doctor-state-dir=/host/var/lib/tke-agent-network/agent-cni \\
  --doctor-host-cni-bin=/host/opt/cni/bin \\
  --doctor-host-cni-conf=/host/etc/cni/net.d \\
  --doctor-zeroproxy-url=http://127.0.0.1:18080/healthz

AGENT_CNI_DOCTOR_PASSED

EGRESS_ALLOWED_BY_POLICY
CREDENTIAL_INJECTED_BY_ZEROPROXY
EGRESS_DENIED_BY_POLICY
INGRESS_ALLOWED_BY_ZEROPROXY
INGRESS_DENIED_BY_ZEROPROXY
CODING_AGENT_DEMO_PASSED
RAG_AGENT_DEMO_PASSED
MULTI_AGENT_GATEWAY_DEMO_PASSED

EGRESS_ALLOWED_BY_POLICY
CODING_AGENT_DEMO_PASSED
RAG_AGENT_DEMO_PASSED
DIRECT_BYPASS_DENIED_BY_ZEROPROXY

MAIN_CNI_DNS_PASSED
MAIN_CNI_SERVICE_PASSED
MAIN_CNI_COMPAT_CHECKS_PASSED

Fake-IP Pod
  ├── DNS（UDP/53）→ ZeroProxy DNS Proxy
  ├── ClusterIP Service → fwmark bypass → kube-proxy / 主 CNI
  └── 其他 TCP → ZeroProxy 策略代理

deny → credential → allow → 默认拒绝

policy:
  directBypass:
    defaultAction: deny

停止 agent-cni-installer
→ 在 Canary 节点执行 rollback-agent-cni
→ 检查宿主机残留
→ 移除 Canary 标签
→ 再卸载 Addon 或清理剩余组件

agentcni0 网桥
AGENT-CNI iptables 规则
/opt/cni/bin/agent-cni
/etc/cni/net.d/00-agent-cni.conf
/var/lib/tke-agent-network/agent-cni 状态文件

kubectl get pod -n tke-agent-network-real -o wide
kubectl describe pod -n tke-agent-network-real <installer-pod>
kubectl logs -n tke-agent-network-real <installer-pod>

iptables -t nat -S
iptables -t mangle -S
kubectl get svc -A -o wide

kubectl get agentnetworkpolicy -A -o wide
kubectl logs -n tke-agent-network-real deploy/agent-network-controller --tail=200
kubectl logs -n tke-agent-network-real ds/zeroproxy --tail=200

phase=Active
observedGeneration=<当前 generation>