fix(manifests): add hostPID for hairpin

This is needed because #1582 which was recently merged relies upon
finding the correct veth interface via /proc/<pid> which isn't available
unless kube-router is in the same process namespace.

hostPID and hostIPC was always required for DSR functionality, but now
hostPID is needed for hairpin to be available.
This commit is contained in:
Aaron U'Ren 2023-12-08 16:35:49 -06:00 committed by Aaron U'Ren
parent aebaa48ea1
commit eb2628874c
11 changed files with 11 additions and 0 deletions

View File

@ -143,6 +143,7 @@ spec:
- name: kubeconfig - name: kubeconfig
mountPath: /var/lib/kube-router mountPath: /var/lib/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -139,6 +139,7 @@ spec:
- name: kubeconfig - name: kubeconfig
mountPath: /var/lib/kube-router mountPath: /var/lib/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -64,6 +64,7 @@ spec:
mountPath: /run/xtables.lock mountPath: /run/xtables.lock
readOnly: false readOnly: false
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -109,6 +109,7 @@ spec:
- mountPath: /etc/kube-router - mountPath: /etc/kube-router
name: kube-router-cfg name: kube-router-cfg
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -104,6 +104,7 @@ spec:
- name: kube-router-cfg - name: kube-router-cfg
mountPath: /etc/kube-router mountPath: /etc/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -100,6 +100,7 @@ spec:
- name: kube-router-cfg - name: kube-router-cfg
mountPath: /etc/kube-router mountPath: /etc/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -99,6 +99,7 @@ spec:
- name: kube-router-cfg - name: kube-router-cfg
mountPath: /etc/kube-router mountPath: /etc/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -99,6 +99,7 @@ spec:
- name: kube-router-cfg - name: kube-router-cfg
mountPath: /etc/kube-router mountPath: /etc/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -120,6 +120,7 @@ spec:
- name: kube-router-cfg - name: kube-router-cfg
mountPath: /etc/kube-router mountPath: /etc/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -113,6 +113,7 @@ spec:
- name: kube-router-cfg - name: kube-router-cfg
mountPath: /etc/kube-router mountPath: /etc/kube-router
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists

View File

@ -112,6 +112,7 @@ spec:
- mountPath: /etc/kube-router - mountPath: /etc/kube-router
name: kube-router-cfg name: kube-router-cfg
hostNetwork: true hostNetwork: true
hostPID: true
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
operator: Exists operator: Exists