kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Set kube-proxy-replacement to partial 

Fully relying on kube-proxy breaks network policies.
Setting kube-proxy-replacement to partial instead of disabled makes
cilium behave as in 1.6.
This commit is contained in:
Ole Markus With 2020-03-14 08:36:48 +01:00
parent 11545b085a
commit a98666d05a
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
upup/models/cloudup/resources/addons/networking.cilium.io/k8s-1.12.yaml.template
View File

@ -121,7 +121,7 @@ data:
install-iptables-rules: "{{- if .IPTablesRulesNoinstall -}}false{{- else -}}true{{- end -}}" install-iptables-rules: "{{- if .IPTablesRulesNoinstall -}}false{{- else -}}true{{- end -}}"
auto-direct-node-routes: "{{- if .AutoDirectNodeRoutes -}}true{{- else -}}false{{- end -}}" auto-direct-node-routes: "{{- if .AutoDirectNodeRoutes -}}true{{- else -}}false{{- end -}}"
enable-node-port: "{{- if .EnableNodePort -}}true{{- else -}}false{{- end -}}" enable-node-port: "{{- if .EnableNodePort -}}true{{- else -}}false{{- end -}}"
kube-proxy-replacement: "{{- if .EnableNodePort -}}strict{{- else -}}disabled{{- end -}}" kube-proxy-replacement: "{{- if .EnableNodePort -}}strict{{- else -}}partial{{- end -}}"
{{ with .Ipam }} {{ with .Ipam }}
ipam: {{ . }} ipam: {{ . }}
{{ if eq . "eni" }} {{ if eq . "eni" }}

2
upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml
View File

@ -97,7 +97,7 @@ spec:
- id: k8s-1.12 - id: k8s-1.12
kubernetesVersion: '>=1.12.0' kubernetesVersion: '>=1.12.0'
manifest: networking.cilium.io/k8s-1.12.yaml manifest: networking.cilium.io/k8s-1.12.yaml
manifestHash: 77a1c4740beeaf403554fa4616809fa48fa07d78 manifestHash: ecb28739c283287eacd9863f1d057e5b09fabb1a
name: networking.cilium.io name: networking.cilium.io
selector: selector:
role.kubernetes.io/networking: "1" role.kubernetes.io/networking: "1"