fix flavors beside clusterclass that were missing cilium host FW (#354)

linode · Jun 5, 2024 · fd82259 · fd82259
1 parent 30e714e
commit fd82259
Show file tree

Hide file tree

Showing 7 changed files with 35 additions and 0 deletions.
diff --git a/templates/flavors/k3s/dual-stack/kustomization.yaml b/templates/flavors/k3s/dual-stack/kustomization.yaml
@@ -61,6 +61,11 @@ patches:
             valuesContent: |-
               bgpControlPlane:
                 enabled: true
+              policyAuditMode: ${FW_AUDIT_ONLY:=true}
+              hostFirewall:
+                enabled: true
+              extraConfig:
+                allow-localhost: policy
               ipam:
                 mode: kubernetes
               ipv4:

diff --git a/templates/flavors/k3s/full-vpcless/kustomization.yaml b/templates/flavors/k3s/full-vpcless/kustomization.yaml
@@ -93,6 +93,11 @@ patches:
             valuesContent: |-
               bgpControlPlane:
                 enabled: true
+              policyAuditMode: ${FW_AUDIT_ONLY:=true}
+              hostFirewall:
+                enabled: true
+              extraConfig:
+                allow-localhost: policy
               ipam:
                 mode: kubernetes
               ipv4:

diff --git a/templates/flavors/k3s/vpcless/kustomization.yaml b/templates/flavors/k3s/vpcless/kustomization.yaml
@@ -93,6 +93,11 @@ patches:
             valuesContent: |-
               bgpControlPlane:
                 enabled: true
+              policyAuditMode: ${FW_AUDIT_ONLY:=true}
+              hostFirewall:
+                enabled: true
+              extraConfig:
+                allow-localhost: policy
               ipam:
                 mode: kubernetes
               ipv4:

diff --git a/templates/flavors/kubeadm/dual-stack/kustomization.yaml b/templates/flavors/kubeadm/dual-stack/kustomization.yaml
@@ -47,6 +47,11 @@ patches:
         value: |
           bgpControlPlane:
             enabled: true
+          policyAuditMode: ${FW_AUDIT_ONLY:=true}
+          hostFirewall:
+            enabled: true
+          extraConfig:
+            allow-localhost: policy
           ipv6:
             enabled: true
           ipam:

diff --git a/templates/flavors/kubeadm/full-vpcless/kustomization.yaml b/templates/flavors/kubeadm/full-vpcless/kustomization.yaml
@@ -52,6 +52,11 @@ patches:
         value: |
           bgpControlPlane:
             enabled: true
+          policyAuditMode: ${FW_AUDIT_ONLY:=true}
+          hostFirewall:
+            enabled: true
+          extraConfig:
+            allow-localhost: policy
           ipv6:
             enabled: true
           ipam:

diff --git a/templates/flavors/kubeadm/vpcless/kustomization.yaml b/templates/flavors/kubeadm/vpcless/kustomization.yaml
@@ -13,6 +13,11 @@ patches:
         value: |
           bgpControlPlane:
             enabled: true
+          policyAuditMode: ${FW_AUDIT_ONLY:=true}
+          hostFirewall:
+            enabled: true
+          extraConfig:
+            allow-localhost: policy
           ipam:
             mode: kubernetes
           k8s:

diff --git a/templates/flavors/rke2/vpcless/kustomization.yaml b/templates/flavors/rke2/vpcless/kustomization.yaml
@@ -13,6 +13,11 @@ patches:
         value: |
           bgpControlPlane:
             enabled: true
+          policyAuditMode: ${FW_AUDIT_ONLY:=true}
+          hostFirewall:
+            enabled: true
+          extraConfig:
+            allow-localhost: policy
           ipam:
             mode: kubernetes
           k8s: