Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-10-01 01:36:09 -04:00
Code Issues Packages Projects Releases Wiki Activity

cilium: enable bpf masquerading (#2723)

Browse Source 
* cilium: enable bpf masquerading

* cilium: also enable ipMasqAgent

* cilium: remove custom Azure masqing
This commit is contained in:
3u13r 2023-12-15 23:07:03 +01:00 committed by GitHub
parent 0111b6d718
commit 183c564483
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 51 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
internal/constellation/helm/overrides.go
View File

@ -59,6 +59,12 @@ func extraCiliumValues(provider cloudprovider.Provider, conformanceMode bool, ou
extraVals["encryption"] = map[string]any{
"strictMode": strictMode,
}
extraVals["ipMasqAgent"] = map[string]any{
"config": map[string]any{
"nonMasqueradeCIDRs": []string{output.IPCidrNode},
},
}
return extraVals
}

47
internal/constellation/helm/values.go
View File

@ -49,6 +49,15 @@ var ciliumVals = map[string]map[string]any{
"useDigest": true,
},
},
"bpf": map[string]any{
"masquerade": true,
},
"ipMasqAgent": map[string]any{
"enabled": true,
"config": map[string]any{
"masqLinkLocal": true,
},
},
"kubeProxyReplacement": "strict",
"enableCiliumEndpointSlice": true,
"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@ -92,8 +101,15 @@ var ciliumVals = map[string]map[string]any{
"useDigest": true,
},
},
"egressMasqueradeInterfaces": "eth0",
"enableIPv4Masquerade": true,
"bpf": map[string]any{
"masquerade": true,
},
"ipMasqAgent": map[string]any{
"enabled": true,
"config": map[string]any{
"masqLinkLocal": true,
},
},
"kubeProxyReplacement": "strict",
"enableCiliumEndpointSlice": true,
"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@ -133,6 +149,15 @@ var ciliumVals = map[string]map[string]any{
"ipam": map[string]any{
"mode": "kubernetes",
},
"bpf": map[string]any{
"masquerade": true,
},
"ipMasqAgent": map[string]any{
"enabled": true,
"config": map[string]any{
"masqLinkLocal": true,
},
},
"kubeProxyReplacement": "strict",
"enableCiliumEndpointSlice": true,
"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@ -175,6 +200,15 @@ var ciliumVals = map[string]map[string]any{
"useDigest": true,
},
},
"bpf": map[string]any{
"masquerade": true,
},
"ipMasqAgent": map[string]any{
"enabled": true,
"config": map[string]any{
"masqLinkLocal": true,
},
},
"kubeProxyReplacement": "strict",
"enableCiliumEndpointSlice": true,
"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@ -215,6 +249,15 @@ var ciliumVals = map[string]map[string]any{
},
},
},
"bpf": map[string]any{
"masquerade": true,
},
"ipMasqAgent": map[string]any{
"enabled": true,
"config": map[string]any{
"masqLinkLocal": true,
},
},
"kubeProxyReplacement": "strict",
"enableCiliumEndpointSlice": true,
"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",