From 1ddecb1cef65c9715ed66b6c335634bc51f59613 Mon Sep 17 00:00:00 2001 From: Dalton Hubble Date: Fri, 23 Aug 2024 07:15:18 -0700 Subject: [PATCH] Change Cilium configuration to use kube-proxy replacement * Skip creating the kube-proxy DaemonSet when Cilium is chosen --- manifests.tf | 2 +- resources/cilium/config.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/manifests.tf b/manifests.tf index e4047cf..fc57714 100644 --- a/manifests.tf +++ b/manifests.tf @@ -56,7 +56,7 @@ locals { pod_cidr = var.pod_cidr daemonset_tolerations = var.daemonset_tolerations } - ) if var.components.enable && var.components.kube_proxy.enable + ) if var.components.enable && var.components.kube_proxy.enable && var.networking != "cilium" } ) } diff --git a/resources/cilium/config.yaml b/resources/cilium/config.yaml index 6ff7d81..f896ab7 100644 --- a/resources/cilium/config.yaml +++ b/resources/cilium/config.yaml @@ -127,8 +127,8 @@ data: enable-bpf-masquerade: "true" # kube-proxy - kube-proxy-replacement: "false" - kube-proxy-replacement-healthz-bind-address: "" + kube-proxy-replacement: "true" + kube-proxy-replacement-healthz-bind-address: ":10256" enable-session-affinity: "true" # ClusterIPs from host namespace