chore(t8s-cluster/workload-cluster): enable cilium eBPF routing

with the aforementioned ports
teutonet · Sep 26, 2024 · 5bc93b8 · 5bc93b8
1 parent 520a631
commit 5bc93b8
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/charts/t8s-cluster/templates/workload-cluster/cni-cilium.yaml b/charts/t8s-cluster/templates/workload-cluster/cni-cilium.yaml
@@ -25,6 +25,15 @@ spec:
   targetNamespace: kube-system
   releaseName: cni
   values:
+    # enable eBPF based routing instead of iptables
+    nodePort:
+      enabled: true
+    bpf:
+      masquerade: true
+    # enable eBPF bases host routing
+    # currently not really possible with CAPI, as they don't support disabling the built-in kube-proxy
+    # kubeProxyReplacement: strict
+
     rollOutCiliumPods: true
     encryption:
       enabled: false