Skip to content

Commit

Permalink
Merge pull request #4886 from aroradaman/kube-proxy-config-v1alpha2-d…
Browse files Browse the repository at this point in the history
…esign

Kube proxy config v1alpha2 milestone and design
  • Loading branch information
k8s-ci-robot authored Oct 3, 2024
2 parents b830921 + 77d1001 commit c06bd87
Show file tree
Hide file tree
Showing 2 changed files with 17 additions and 15 deletions.
24 changes: 13 additions & 11 deletions keps/sig-network/784-kube-proxy-component-config/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -157,18 +157,19 @@ The mitigations to those risks:
| v1alpha1 | v1alpha2 | DataType | Comments |
|--------------------|--------------------------|--------------|----------------------------------------------------------------------------------------------------------------|
| ClusterCIDR | DetectLocal.ClusterCIDRs | list[string] | list of CIDR ranges for detecting local traffic |
| BindAddress | NodeIPOverride | list[string] | list of primary node IPs |
| MetricsBindAddress | MetricsBindAddresses | list[string] | list of CIDR ranges that contain valid node IPs to expose metrics server, instead of host port(ip:port) format |
| HealthzBindAddress | HealthzBindAddresses | list[string] | list of CIDR ranges that contain valid node IPs to expose healthz server, instead of host port(ip:port) format | |

### Following fields will be added
| Field | DataType | Default Value | Comments |
|----------------------|------------------|---------------|--------------------------------------------------------------------------------|
| IPVS.MasqueradeBit | integer (32-bit) | 14 | IPVS will use this field instead of IPTables.MasqueradeBit |
| Windows.RunAsService | boolean | false | new field for existing --windows-service command line flag |
| ConfigHardFail | boolean | true | if set to true, kube-proxy will exit rather than just warning on config errors |
| MetricsBindPort | integer (32-bit) | 10249 | port on which metrics server will be exposed |
| HealthzBindPort | integer (32-bit) | 10256 | port on which helathz server will be exposed |
| Field | DataType | Default Value | Comments |
|----------------------|------------------|---------------|----------------------------------------------------------------------------------------------------------|
| IPVS.MasqueradeBit | integer (32-bit) | 14 | IPVS will use this field instead of IPTables.MasqueradeBit |
| Windows.RunAsService | boolean | false | new field for existing --windows-service command line flag |
| ConfigHardFail | boolean | true | if set to true, kube-proxy will exit rather than just warning on config errors |
| NodeIPOverride | list[string] | | list of primary node IPs |
| IPFamilyPolicy | string | | controls nodeIP(s) detection, allowed values: [`SingleStack` \| `PreferDualStack` \| `RequireDualStack`] |
| MetricsBindPort | integer (32-bit) | 10249 | port on which metrics server will be exposed |
| HealthzBindPort | integer (32-bit) | 10256 | port on which helathz server will be exposed |

### Following fields will have different default values
| Field | v1alpha1 (default) | v1alpha2 (default) |
Expand All @@ -178,9 +179,10 @@ The mitigations to those risks:


### Following fields will be dropped
| Key | Comments |
|-----------|-----------------------------------------|
| PortRange | dropped as no longer used by kube-proxy |
| Key | Comments |
|--------------|------------------------------------------|
| PortRange | dropped as no longer used by kube-proxy |
| BindAddress | dropped in favor of NodeIPOverride |


### Test Plan
Expand Down
8 changes: 4 additions & 4 deletions keps/sig-network/784-kube-proxy-component-config/kep.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,13 +29,13 @@ stage: alpha
# The most recent milestone for which work toward delivery of this KEP has been
# done. This can be the current (upcoming) milestone, if it is being actively
# worked on.
latest-milestone: "v1.31"
latest-milestone: "v1.32"

# The milestone at which this feature was, or is targeted to be, at each stage.
milestone:
alpha: "v1.31"
beta: "v1.33"
stable: "v1.35"
alpha: "v1.32"
beta: "v1.35"
stable: "v1.38"

# The following PRR answers are required at alpha release
# List the feature gate name and the components for which it must be enabled
Expand Down

0 comments on commit c06bd87

Please sign in to comment.