Revision 72da224ff05450b83e8ed7eca76b38da8208df48 authored by Marco Hofstetter on 12 February 2024, 13:05:08 UTC, committed by Julian Wiedmann on 28 February 2024, 12:27:37 UTC
This commit adds support for exposing the L7 Envoy Listeners
directly on the host network - and no longer use Kubernetes Services
of type `LoadBalancer` or `NodePort`.

The listener is exposed on all interfaces (`0.0.0.0` for IPv4 and/or `::` for IPv6).

**Enable HostNetwork support via Helm**

* Ingress Controller: `ingressController.hostNetwork.enabled=true`
* Gateway API: `gatewayAPI.hostNetwork.enabled=true`

**Configure listener port**

* Shared Ingress: configurable via Helm
  (`ingressController.hostNetwork.sharedHTTPPort` & `ingressController.hostNetwork.sharedTLSPassthroughPort`)
* Dedicated Ingress: configurable via Annotation on the resource `Ingress`
  (`ingress.cilium.io/http-host-port` & `ingress.cilium.io/tls-passthrough-host-port`)
* Gateway API: configurable via `spec.listeners.port` on the resource `Gateway`

Be aware that missconfiguration might result in port clashes.

Signed-off-by: Marco Hofstetter <marco.hofstetter@isovalent.com>
1 parent 3f9e0e9
History
File Mode Size
.devcontainer
.github
.nvim
.travis
.vscode
Documentation
api
bpf
bugtool
cilium-dbg
cilium-health
clustermesh-apiserver
contrib
daemon
examples
hack
hubble-relay
images
install
operator
pkg
plugins
test
tools
vendor
.authors.aux -rw-r--r-- 416 bytes
.clang-format -rw-r--r-- 7.6 KB
.clomonitor.yml -rw-r--r-- 984 bytes
.gitattributes -rw-r--r-- 887 bytes
.gitignore -rw-r--r-- 1.8 KB
.golangci.yaml -rw-r--r-- 4.1 KB
.mailmap -rw-r--r-- 6.5 KB
.openvex.json -rw-r--r-- 4.6 KB
.travis.yml -rw-r--r-- 506 bytes
AUTHORS -rw-r--r-- 46.9 KB
CODEOWNERS -rw-r--r-- 27.6 KB
CODE_OF_CONDUCT.md -rw-r--r-- 2.2 KB
CONTRIBUTING.md -rw-r--r-- 691 bytes
FURTHER_READINGS.rst -rw-r--r-- 6.4 KB
LICENSE -rw-r--r-- 11.1 KB
MAINTAINERS.md -rw-r--r-- 4.6 KB
Makefile -rw-r--r-- 26.6 KB
Makefile.defs -rw-r--r-- 7.3 KB
Makefile.docker -rw-r--r-- 7.1 KB
Makefile.kind -rw-r--r-- 16.7 KB
Makefile.quiet -rw-r--r-- 818 bytes
README.rst -rw-r--r-- 19.6 KB
SECURITY-INSIGHTS.yml -rw-r--r-- 2.1 KB
SECURITY.md -rw-r--r-- 1.0 KB
USERS.md -rw-r--r-- 33.4 KB
VERSION -rw-r--r-- 11 bytes
Vagrantfile -rw-r--r-- 14.9 KB
go.mod -rw-r--r-- 12.6 KB
go.sum -rw-r--r-- 95.0 KB
netlify.toml -rw-r--r-- 92 bytes
stable.txt -rw-r--r-- 8 bytes
vagrant_box_defaults.rb -rw-r--r-- 334 bytes

README.rst

back to top