Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-08-18 11:37:55 -04:00
Code Issues Projects Releases Packages Wiki Activity

Cilium: Enable wireguard-go fallback & mount TUN device from host

Browse source 
(Required for Kernel 5.4, since Wireguard is only available in-kernel
since v5.6)
This commit is contained in:
Nils Hanke 2022-12-21 19:07:48 +01:00
parent d8d1e3d733
commit 9fac0c5007
2 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

16
cli/internal/helm/charts/cilium/values.yaml
View file

@ -132,13 +132,13 @@ extraArgs: []
extraEnv: [] extraEnv: []
# -- Additional agent hostPath mounts. # -- Additional agent hostPath mounts.
extraHostPathMounts: [] extraHostPathMounts:
# - name: host-mnt-data - name: dev-net
# mountPath: /host/mnt/data mountPath: /dev/net
# hostPath: /mnt/data hostPath: /dev/net
# hostPathType: Directory hostPathType: Directory
# readOnly: true readOnly: true
# mountPropagation: HostToContainer mountPropagation: HostToContainer
# -- Additional agent volumes. # -- Additional agent volumes.
extraVolumes: [] extraVolumes: []
@ -525,7 +525,7 @@ encryption:
wireguard: wireguard:
# -- Enables the fallback to the user-space implementation. # -- Enables the fallback to the user-space implementation.
userspaceFallback: false userspaceFallback: true
# -- Deprecated in favor of encryption.ipsec.keyFile. # -- Deprecated in favor of encryption.ipsec.keyFile.
# Name of the key file inside the Kubernetes secret configured via secretName. # Name of the key file inside the Kubernetes secret configured via secretName.

16
cli/internal/helm/charts/cilium/values.yaml.tmpl
View file

@ -522,7 +522,7 @@ encryption:
wireguard: wireguard:
# -- Enables the fallback to the user-space implementation. # -- Enables the fallback to the user-space implementation.
userspaceFallback: false userspaceFallback: true
# -- Deprecated in favor of encryption.ipsec.keyFile. # -- Deprecated in favor of encryption.ipsec.keyFile.
# Name of the key file inside the Kubernetes secret configured via secretName. # Name of the key file inside the Kubernetes secret configured via secretName.
@ -1582,13 +1582,13 @@ operator:
extraEnv: [] extraEnv: []
# -- Additional cilium-operator hostPath mounts. # -- Additional cilium-operator hostPath mounts.
extraHostPathMounts: [] extraHostPathMounts:
# - name: host-mnt-data - name: dev-net
# mountPath: /host/mnt/data mountPath: /dev/net
# hostPath: /mnt/data hostPath: /dev/net
# hostPathType: Directory hostPathType: Directory
# readOnly: true readOnly: true
# mountPropagation: HostToContainer mountPropagation: HostToContainer
# -- Additional cilium-operator volumes. # -- Additional cilium-operator volumes.
extraVolumes: [] extraVolumes: []