-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
helm: consolidate IPSec and Wireguard encryption options #15809
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for taking care of this! One non-blocking nit.
f5ab456
to
829f291
Compare
829f291
to
ff183bd
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah, good catch with the daemonset. I think you missed one though:
https://github.com/cilium/cilium/blob/ff183bdcb54526123f7fe60bbe3f35f784350ec8/install/kubernetes/cilium/templates/cilium-agent-daemonset.yaml#L329
ff183bd
to
1a67b22
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
💯
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks! One nit: I think we shall acredit the previous PR author in your commit msg too.
1a67b22
to
e1fac81
Compare
This commit introduces a new helm option, encryption.type, which can be used to specifies what method should be used for encryption (either ipsec or wireguard). The goal here is to add support for wireguard without introducing any breaking change in the helm charts. Fixes: #15483 Co-authored-by: Youssef Azrak <yazrak.tech@gmail.com> Signed-off-by: Gilberto Bertin <gilberto@isovalent.com>
This commit updates the Wireguard GSG to reflect the new Helm options introduced to enable it. Signed-off-by: Gilberto Bertin <gilberto@isovalent.com>
e1fac81
to
8fe34cf
Compare
Updated docs and fixed the |
test-me-please |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM as-is, just one reserve below.
test-me-please |
This commit introduces a new helm option, encryption.type, which can be
used to specifies what method should be used for encryption (either
ipsec or wireguard).
The goal here is to add support for wireguard without introducing any
breaking change in the helm charts.
Fixes: #15483