talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Enable ipv4 and tunnel routing.

Browse Source
This commit is contained in:
Tom Alexander
2025-12-29 17:00:23 -05:00
parent ed5d463741
commit 98a5029ccf
5 changed files with 37 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
nix/kubernetes/README.org
View File

@@ -23,14 +23,16 @@
--set k8sServiceHost="2620:11f:7001:7:ffff:ffff:ad7:1dd" \
--set k8sServicePort=6443 \
--set ipv6.enabled=true \
--set ipv4.enabled=false \
--set enableIPv4BIGTCP=false \
--set enableIPv6BIGTCP=true \
--set routingMode=native \
--set ipv4NativeRoutingCIDR=10.0.0.0/8 \
--set ipv6NativeRoutingCIDR=fd00::/100
--set ipv4.enabled=true
# --set enableIPv6Masquerade=false
# --set enableIPv4BIGTCP=true \
# --set enableIPv6BIGTCP=true
# --set routingMode=native \
# --set ipv4NativeRoutingCIDR=10.0.0.0/8 \
# --set ipv6NativeRoutingCIDR=fd00::/100
kubectl -n kube-system exec ds/cilium -- cilium-dbg status --verbose
kubec
tl -n kube-system exec ds/cilium -- cilium-dbg status --verbose
kubectl -n kube-system exec ds/cilium -- cilium-dbg status | grep KubeProxyReplacement
# --set hostFirewall.enabled=true
@@ -40,6 +42,11 @@
# --set ipv6-native-routing-cidr=fd00::/100
# --set 'ipam.operator.clusterPoolIPv4PodCIDRList=["10.0.0.0/8"]' \
# --set 'ipam.operator.clusterPoolIPv6PodCIDRList=["fd00::/100"]' \
# --set encryption.enabled=true \
# --set encryption.type=wireguard
# --set encryption.nodeEncryption=true
#+end_src
** Install flux
#+begin_src bash