Network Plugin Manager reconciles host routes, CNI configuration, ARP entries, connection tracking, host-port rules, and network-driver helpers from PastureStack metadata. It is a privileged system component deployed once per host by the PastureStack infrastructure catalog.
PastureStack is an independent community effort to preserve, audit, and modernize the Rancher 1.6 ecosystem. It is not affiliated with or endorsed by Rancher Labs or SUSE.
Upstream: rancher/plugin-manager. This GitHub fork retains the upstream Git history, authorship, dates, and license notices. PastureStack maintenance is consolidated into one commit after the preserved upstream boundary.
The maintained image is published from this repository as:
ghcr.io/pasturestack/network-plugin-manager:<version>
Production catalog templates pin both an immutable version and its manifest digest. This image is not a standalone application: it requires host networking, host PID visibility, the Docker socket, host network state, CNI directories, and metadata generated by the PastureStack control plane.
The primary executable is network-plugin-manager. Its default metadata endpoint is http://metadata/2016-07-29; the catalog supplies the link-local endpoint used by each host deployment.
The reviewed build uses Go 1.26.5, Docker CLI 29.6.2, and Docker Buildx 0.34.1. Downloaded tools are checked against fixed SHA-256 values. The Ubuntu base image is digest-pinned, package installation uses the fixed 20260722T164940Z Ubuntu archive snapshot, and the image exporter normalizes file timestamps to the source commit time.
make test
make validate
bash scripts/check-build-downloads
VERSION_OVERRIDE=v0.6.34 IMAGE_NAMESPACE=pasturestack make packageNo CI/CD workflow is enabled during the migration and system-integration phase.
Some legacy API paths, Docker labels, filesystem paths, and dependency namespaces are protocol or data contracts. They are isolated and documented in COMPATIBILITY.md, rather than exposed as PastureStack branding.
This component is intentionally privileged. Review SECURITY.md before changing mounts, capabilities, metadata trust, or Docker access.
The inherited project remains licensed under Apache License 2.0. PastureStack does not claim authorship of inherited work. See ORIGIN.md and THIRD_PARTY_NOTICES.md for provenance and bundled dependency notices.