Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Emulate Cilium KubeProxyReplacement partial mode #363

Merged
merged 1 commit into from
Aug 26, 2023
Merged

Emulate Cilium KubeProxyReplacement partial mode #363

merged 1 commit into from
Aug 26, 2023

Conversation

dghubble
Copy link
Member

  • Cilium KubeProxyReplacement mode used to support a partial option, but in v1.14 it became true or false
  • Emulate the old partial mode by disabling KubeProxyReplacement but turning on the individual features
  • The alternative of enabling KubeProxyReplacement has ramifications because Cilium then needs to be configured with the apiserver server address, which creates a dependency on the cloud provider's DNS, clashes with kube-proxy, and removing kube-proxy creates complications for how node health is assessed. Removing kube-proxy is further complicated by the fact its still used by other supported CNIs which creates a tricky support matrix

Docs: https://docs.cilium.io/en/latest/network/kubernetes/kubeproxy-free/#kube-proxy-hybrid-modes

* Cilium KubeProxyReplacement mode used to support a partial
option, but in v1.14 it became true or false
* Emulate the old partial mode by disabling KubeProxyReplacement
but turning on the individual features
* The alternative of enabling KubeProxyReplacement has ramifications
because Cilium then needs to be configured with the apiserver server
address, which creates a dependency on the cloud provider's DNS,
clashes with kube-proxy, and removing kube-proxy creates complications
for how node health is assessed. Removing kube-proxy is further
complicated by the fact its still used by other supported CNIs which
creates a tricky support matrix

Docs: https://docs.cilium.io/en/latest/network/kubernetes/kubeproxy-free/#kube-proxy-hybrid-modes
@dghubble dghubble merged commit 251adf8 into main Aug 26, 2023
1 check passed
@dghubble dghubble deleted the partial branch August 26, 2023 18:31
dghubble added a commit to poseidon/typhoon that referenced this pull request Aug 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant