From 451d39664a8259c135a51ab2b73345e39c1067c6 Mon Sep 17 00:00:00 2001 From: Paul Chaignon Date: Mon, 8 Nov 2021 23:00:17 +0100 Subject: [PATCH] install: Disable BPF masquerading by default In commit bf2c1f99 ("install: Disable kube-proxy-replacement by default") we switched kube-proxy-replacement to disabled by default. We didn't change the default setting for BPF masquerading, even though it requires kube-proxy-replacement to be enabled. As a result, default installation result in a warning when BPF masquerading is forcefully disabled. This commit disables BPF masquerading by default to fix it. We could enable BPF masquerading when kube-proxy-replacement is enabled by the user, but it seems more confusing than anything. Fixes: bf2c1f99 ("install: Disable kube-proxy-replacement by default") Signed-off-by: Paul Chaignon --- install/install.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/install.go b/install/install.go index f0e5df20af..be3ef4eb34 100644 --- a/install/install.go +++ b/install/install.go @@ -1264,7 +1264,7 @@ func (k *K8sInstaller) generateConfigMap() (*corev1.ConfigMap, error) { // wait-bpf-mount makes init container wait until bpf filesystem is mounted "wait-bpf-mount": "true", - "enable-bpf-masquerade": "true", + "enable-bpf-masquerade": "false", "enable-xt-socket-fallback": "true", "install-iptables-rules": "true",