FEATURE/MAJOR: kubernetes-ingress: Add QUIC support for upcoming IC v1.11

Signed-off-by: Dinko Korunic <[email protected]>

Author: dkorunic

kubernetes-ingress/templates/NOTES.txt

@@ -22,16 +22,51 @@ Service ports mapped are:
   - name: {{ $key }}
     containerPort: {{ $value }}
     protocol: TCP
+{{- end }}
+  - name: quic
+    containerPort: {{ .Values.controller.containerPort.https }}
+    protocol: UDP
+{{- range .Values.controller.service.tcpPorts }}
+  - name: {{ .name }}-tcp
+    containerPort: {{ .targetPort }}
+    protocol: TCP
 {{- end }}
 {{- end }}
 {{- if eq .Values.controller.kind "DaemonSet" }}
+{{- $useHostPort := .Values.controller.daemonset.useHostPort -}}
 {{- $hostPorts := .Values.controller.daemonset.hostPorts -}}
+{{- $hostIP := .Values.controller.daemonset.hostIP -}}
 {{- range $key, $value := .Values.controller.containerPort }}
   - name: {{ $key }}
     containerPort: {{ $value }}
     protocol: TCP
+{{- if $useHostPort }}
     hostPort: {{ index $hostPorts $key | default $value }}
 {{- end }}
+{{- if $hostIP }}
+    hostIP: {{ $hostIP }}
+{{- end }}
+{{- end }}
+  - name: quic
+    containerPort: {{ .Values.controller.containerPort.https }}
+    protocol: UDP
+{{- if $useHostPort }}
+    hostPort: {{ .Values.controller.daemonset.hostPorts.https }}
+{{- end }}
+{{- if $hostIP }}
+    hostIP: {{ $hostIP }}
+{{- end }}
+{{- range .Values.controller.service.tcpPorts }}
+  - name: {{ .name }}-tcp
+    containerPort: {{ .port }}
+    protocol: TCP
+{{- if $useHostPort }}
+    hostPort: {{ .port }}
+{{- end }}
+{{- if $hostIP }}
+    hostIP: {{ $hostIP }}
+{{- end }}
+{{- end }}
 {{- end }}
 
 Node IP can be found with:

kubernetes-ingress/templates/controller-daemonset.yaml

@@ -101,6 +101,8 @@ spec:
           - --configmap={{ include "kubernetes-ingress.namespace" . }}/{{ include "kubernetes-ingress.fullname" . }}
           - --http-bind-port={{ .Values.controller.containerPort.http }}
           - --https-bind-port={{ .Values.controller.containerPort.https }}
+          - --quic-bind-port={{ .Values.controller.containerPort.https }}
+          - --quic-announce-port={{ .Values.controller.service.ports.https }}
 {{- if .Values.controller.ingressClass }}
           - --ingress.class={{ .Values.controller.ingressClass }}
 {{- end }}
@@ -147,6 +149,15 @@ spec:
               hostIP: {{ $hostIP }}
               {{- end }}
           {{- end }}
+            - name: quic
+              containerPort: {{ .Values.controller.containerPort.https }}
+              protocol: UDP
+              {{- if $useHostPort }}
+              hostPort: {{ .Values.controller.daemonset.hostPorts.https }}
+              {{- end }}
+              {{- if $hostIP }}
+              hostIP: {{ $hostIP }}
+              {{- end }}
           {{- range .Values.controller.service.tcpPorts }}
             - name: {{ .name }}-tcp
               containerPort: {{ .port }}

kubernetes-ingress/templates/controller-deployment.yaml

@@ -101,6 +101,8 @@ spec:
           - --configmap={{ include "kubernetes-ingress.namespace" . }}/{{ include "kubernetes-ingress.fullname" . }}
           - --http-bind-port={{ .Values.controller.containerPort.http }}
           - --https-bind-port={{ .Values.controller.containerPort.https }}
+          - --quic-bind-port={{ .Values.controller.containerPort.https }}
+          - --quic-announce-port={{ .Values.controller.service.ports.https }}
 {{- if .Values.controller.ingressClass }}
           - --ingress.class={{ .Values.controller.ingressClass }}
 {{- end }}
@@ -141,6 +143,9 @@ spec:
               containerPort: {{ $value }}
               protocol: TCP
           {{- end }}
+            - name: quic
+              containerPort: {{ .Values.controller.containerPort.https }}
+              protocol: UDP
           {{- range .Values.controller.service.tcpPorts }}
             - name: {{ .name }}-tcp
               containerPort: {{ .targetPort }}

kubernetes-ingress/templates/controller-service.yaml

@@ -67,6 +67,18 @@ spec:
       nodePort: {{ .Values.controller.service.nodePorts.https }}
     {{- end }}
   {{- end }}
+  {{- if .Values.controller.service.enablePorts.quic }}
+    - name: quic
+      port: {{ .Values.controller.service.ports.https }}
+      protocol: UDP
+      {{- if semverCompare ">=1.20.0-0" .Capabilities.KubeVersion.Version }}
+      appProtocol: https
+      {{- end }}
+      targetPort: {{ .Values.controller.service.targetPorts.quic }}
+    {{- if .Values.controller.service.nodePorts.https }}
+      nodePort: {{ .Values.controller.service.nodePorts.https }}
+    {{- end }}
+  {{- end }}
   {{- if .Values.controller.service.enablePorts.stat }}
     - name: stat
       port: {{ .Values.controller.service.ports.stat }}

kubernetes-ingress/values.yaml

@@ -317,6 +317,12 @@ controller:
   #  - --namespace-whitelist=default
   #  - --namespace-whitelist=namespace1
   #  - --namespace-blacklist=namespace2
+  #  - --disable-ipv4
+  #  - --disable-ipv6
+  #  - --disable-http
+  #  - --disable-https
+  #  - --disable-quic
+  #  - --sync-period=10s
 
   ## Custom configuration for Controller
   ## ref: https://github.com/haproxytech/kubernetes-ingress/tree/master/documentation
@@ -398,6 +404,7 @@ controller:
     enablePorts:
       http: true
       https: true
+      quic: true
       stat: true
       prometheus: true
 
@@ -406,6 +413,7 @@ controller:
     targetPorts:
       http: http
       https: https
+      quic: quic
       stat: stat
       prometheus: prometheus