ingress: Allow strict kube-proxy-replacement

Relates: #30592 Suggested-by: Marco Iorio <marco.iorio@isovalent.com> Signed-off-by: Tam Mach <tam.mach@cilium.io>
cilium · Mar 11, 2024 · ef95374 · ef95374
1 parent 26f8349
commit ef95374
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/operator/pkg/gateway-api/cell.go b/operator/pkg/gateway-api/cell.go
@@ -98,7 +98,9 @@ func initGatewayAPIController(params gatewayAPIParams) error {
 		return nil
 	}
 
-	if params.GatewayApiConfig.KubeProxyReplacement != option.KubeProxyReplacementTrue && !params.GatewayApiConfig.EnableNodePort {
+	if params.GatewayApiConfig.KubeProxyReplacement != option.KubeProxyReplacementTrue &&
+		params.GatewayApiConfig.KubeProxyReplacement != option.KubeProxyReplacementStrict &&
+		!params.GatewayApiConfig.EnableNodePort {
 		params.Logger.Warn("Gateway API support requires either kube-proxy-replacement or enable-node-port enabled")
 		return nil
 	}

diff --git a/operator/pkg/ingress/cell.go b/operator/pkg/ingress/cell.go
@@ -98,7 +98,9 @@ func registerReconciler(params ingressParams) error {
 		return nil
 	}
 
-	if params.IngressConfig.KubeProxyReplacement != option.KubeProxyReplacementTrue && !params.IngressConfig.EnableNodePort {
+	if params.IngressConfig.KubeProxyReplacement != option.KubeProxyReplacementTrue &&
+		params.IngressConfig.KubeProxyReplacement != option.KubeProxyReplacementStrict &&
+		!params.IngressConfig.EnableNodePort {
 		params.Logger.Warn("Ingress Controller support requires either kube-proxy-replacement or enable-node-port enabled")
 		return nil
 	}