Skip to content

Commit

Permalink
install: Disable BPF masquerading by default
Browse files Browse the repository at this point in the history
In commit f1b455c ("install: Disable kube-proxy-replacement by
default") we switched kube-proxy-replacement to disabled by default. We
didn't change the default setting for BPF masquerading, even though it
requires kube-proxy-replacement to be enabled. As a result, default
installation result in a warning when BPF masquerading is forcefully
disabled.

This commit disables BPF masquerading by default to fix it. We could
enable BPF masquerading when kube-proxy-replacement is enabled by the
user, but it seems more confusing than anything.

Fixes: f1b455c ("install: Disable kube-proxy-replacement by default")
Signed-off-by: Paul Chaignon <[email protected]>
  • Loading branch information
pchaigno committed Nov 8, 2021
1 parent bd26554 commit 53cec5f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion install/install.go
Original file line number Diff line number Diff line change
Expand Up @@ -1264,7 +1264,7 @@ func (k *K8sInstaller) generateConfigMap() (*corev1.ConfigMap, error) {
// wait-bpf-mount makes init container wait until bpf filesystem is mounted
"wait-bpf-mount": "true",

"enable-bpf-masquerade": "true",
"enable-bpf-masquerade": "false",

"enable-xt-socket-fallback": "true",
"install-iptables-rules": "true",
Expand Down

0 comments on commit 53cec5f

Please sign in to comment.