Skip to content

Commit

Permalink
test: Disable IPv6 masq for IPsec
Browse files Browse the repository at this point in the history
[1] has all the context. The breakage rose to the surface because in the
previous commit we set KPR=disabled in the 4.19, and iptables started
doing the loadbalancing.

[1]: #23461

Signed-off-by: Martynas Pumputis <m@lambda.lt>
  • Loading branch information
brb authored and pchaigno committed Feb 16, 2023
1 parent bbda112 commit 77e889f
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions test/k8s/services.go
Original file line number Diff line number Diff line change
Expand Up @@ -196,6 +196,9 @@ var _ = SkipDescribeIf(helpers.RunsOn54Kernel, "K8sDatapathServicesTest", func()
deploymentManager.Deploy(helpers.CiliumNamespace, IPSecSecret)
DeployCiliumOptionsAndDNS(kubectl, ciliumFilename, map[string]string{
"encryption.enabled": "true",
// Until https://github.com/cilium/cilium/issues/23461
// has been fixed, we need to disable IPv6 masq
"enableIPv6Masquerade": "false",
})
testExternalTrafficPolicyLocal(kubectl, ni)
deploymentManager.DeleteAll()
Expand Down

0 comments on commit 77e889f

Please sign in to comment.