kubekey icon indicating copy to clipboard operation
kubekey copied to clipboard

Require network cilium to enable without kube-proxy

Open divfor opened this issue 3 years ago • 3 comments

when I set network from calico to cilium, I cannot get a way to disable kube-proxy. if I delete ds/kube-prxoy after install, cilium will not work properly.

divfor avatar Jun 29 '21 10:06 divfor

this is not a normal add-on, so it requires take care additionally - if k8s apiServers are running on multiple nodes, cilium requires to set a LB IP as API Host, and this IP must be accessible without depending on cilium's LB feature, such as a static IPVS rule.

divfor avatar Jun 29 '21 10:06 divfor

Thanks for your proposal, we will consider this in future releases.

24sama avatar Aug 12 '21 02:08 24sama

@divfor Do you have any better ideas to implement it? Would you like to improve it with us?

FeynmanZhou avatar Aug 12 '21 02:08 FeynmanZhou

1、what options kubekey use to install cilium ,this is offcial install options.

https://docs.cilium.io/en/v1.9/gettingstarted/kubeproxy-free/

helm install cilium cilium/cilium --version 1.9.18 \
    --namespace kube-system \
    --set kubeProxyReplacement=strict \
    --set k8sServiceHost=REPLACE_WITH_API_SERVER_IP \
    --set k8sServicePort=REPLACE_WITH_API_SERVER_PORT

2、is it possible skip install kube-proxy in config-sample.yaml

  Kubernetes:
	DisableKubeProxy: true
```

willzhang avatar Jan 09 '23 08:01 willzhang