Skip to content

Commit

Permalink
fix(manifests): add hostPID for hairpin
Browse files Browse the repository at this point in the history
This is needed because cloudnativelabs#1582 which was recently merged relies upon
finding the correct veth interface via /proc/<pid> which isn't available
unless kube-router is in the same process namespace.

hostPID and hostIPC was always required for DSR functionality, but now
hostPID is needed for hairpin to be available.
  • Loading branch information
aauren committed Dec 8, 2023
1 parent aebaa48 commit eb26288
Show file tree
Hide file tree
Showing 11 changed files with 11 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -143,6 +143,7 @@ spec:
- name: kubeconfig
mountPath: /var/lib/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/generic-kuberouter-all-features.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -139,6 +139,7 @@ spec:
- name: kubeconfig
mountPath: /var/lib/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/generic-kuberouter-only-advertise-routes.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -64,6 +64,7 @@ spec:
mountPath: /run/xtables.lock
readOnly: false
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/generic-kuberouter.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -109,6 +109,7 @@ spec:
- mountPath: /etc/kube-router
name: kube-router-cfg
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/kube-router-all-service-daemonset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/kube-router-firewall-daemonset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -99,6 +99,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/kube-router-proxy-daemonset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -99,6 +99,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/kubeadm-kuberouter-all-features-hostport.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -120,6 +120,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/kubeadm-kuberouter-all-features.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -113,6 +113,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down
1 change: 1 addition & 0 deletions daemonset/kubeadm-kuberouter.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -112,6 +112,7 @@ spec:
- mountPath: /etc/kube-router
name: kube-router-cfg
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists
Expand Down

0 comments on commit eb26288

Please sign in to comment.