eks-anywhere icon indicating copy to clipboard operation
eks-anywhere copied to clipboard

Provide a way to remove/install without kube-proxy

Open Cajga opened this issue 2 years ago • 3 comments

What would you like to be added: We would like to be able to remove the kube-proxy (OR install cluster without it at the first place) in a way how EKS-A will not reinstall/try to manage it so, we can use Cilium community in a kube-proxy replacement mode.

Why is this needed: Due to several limitations/missing features in the bundled Cilium, we are replacing it with the community version of Cilium. We would like to start to use the community Cilium's Gateway API implementation for ingress. This requires Cilium to be in kube-proxy replacement mode. That in turn requires us to remove the kube-proxy daemonset from the nodes after installation so, Cilium can replace it with it's own solution.

We may be able to remove the daemonset already (kubectl -n kube-system delete ds kube-proxy) but I guess EKS-A should be aware of this so, it will not try to reinstall it during an upgrade (or while using gitops).

Cajga avatar Aug 04 '23 11:08 Cajga

Note: this will also prevent Cilium Enterprise users to use several important features of Cilium.

Cajga avatar Aug 21 '23 18:08 Cajga

@chrisdoherty4 any plan to idea how to implement this?

RazaGR avatar Dec 15 '23 13:12 RazaGR

Any update of how do we configure kube proxy replacement especially for Cilium Gateway API

thecloudgarage avatar Jun 07 '24 06:06 thecloudgarage