kjuulh/terraform-hcloud-kube-hetzner
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

Cilium full native routing and DSR

Browse Source
This commit is contained in:
Karim Naufal 2021-09-03 12:43:13 +02:00
parent ca2bf4dc82
commit 6faccbc721
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
manifests/helm/cilium/values.yaml
View File

@ -15,10 +15,10 @@ ipam:
# -- Configure the encapsulation configuration for communication between nodes. # -- Configure the encapsulation configuration for communication between nodes.
# Possible values: # Possible values:
# - disabled (breaks csi-controller) # - disabled (native routing on the hetzner network)
# - vxlan (default) # - vxlan
# - geneve # - geneve
tunnel: geneve tunnel: disabled
# -- Specify the IPv4 CIDR for native routing (ie to avoid IP masquerade for). # -- Specify the IPv4 CIDR for native routing (ie to avoid IP masquerade for).
# This value corresponds to the configured cluster-cidr. # This value corresponds to the configured cluster-cidr.
@ -105,6 +105,11 @@ loadBalancer:
# selection e.g. random or maglev # selection e.g. random or maglev
algorithm: maglev algorithm: maglev
# -- mode is the operation mode of load balancing for remote backends
# e.g. snat, dsr, hybrid
# dsr requires native routing via tunnel disabled (set by default above), see https://docs.cilium.io/en/latest/gettingstarted/kubeproxy-free/
mode: dsr
# -- The agent can be put into one of the three policy enforcement modes: # -- The agent can be put into one of the three policy enforcement modes:
# default, always and never. # default, always and never.
# ref: https://docs.cilium.io/en/stable/policy/intro/#policy-enforcement-modes # ref: https://docs.cilium.io/en/stable/policy/intro/#policy-enforcement-modes