Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Cilium agents to connect to apiserver explicitly #365

Merged
merged 1 commit into from
Oct 29, 2023

Conversation

dghubble
Copy link
Member

@dghubble dghubble commented Aug 28, 2023

  • Cilium v1.14 seems to have problems reliably accessing the apiserver via default in-cluster service discovery (relies on kube-proxy instead of DNS) after some time
  • Configure Cilium agents to use the DNS name resolving to the cluster's load balanced apiserver and port. Regrettably, this relies on external DNS rather than being self-contained, but its what Cilium pushes users towards

Workaround for cilium/cilium#27982

* Cilium v1.14 seems to have problems reliably accessing the
apiserver via default in-cluster service discovery (relies on
kube-proxy instead of DNS) after some time
* Configure Cilium agents to use the DNS name resolving to the
cluster's load balanced apiserver and port. Regrettably, this
relies on external DNS rather than being self-contained, but its
what Cilium pushes users towards
dghubble added a commit to poseidon/typhoon that referenced this pull request Aug 28, 2023
@dghubble dghubble merged commit 720adbe into main Oct 29, 2023
1 check passed
@dghubble dghubble deleted the cilium-agent branch October 29, 2023 23:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant