Skip to content

Commit 09fcbf5

Browse files
committed
Wrapped lines.
1 parent 57d3612 commit 09fcbf5

File tree

1 file changed

+13
-5
lines changed

1 file changed

+13
-5
lines changed

content/en/docs/tasks/administer-cluster/ip-masq-agent.md

Lines changed: 13 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,9 +44,13 @@ traffic to "external" addresses must come from a known machine address. For exam
4444
Cloud, any traffic to the internet must come from a VM's IP. When containers are used, as in
4545
Google Kubernetes Engine, the Pod IP will be rejected for egress. To avoid this, we must hide
4646
the Pod IP behind the VM's own IP address - generally known as "masquerade". By default, the
47-
agent is configured to treat the three private IP ranges specified by [RFC 1918](https://tools.ietf.org/html/rfc1918) as non-masquerade [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing). These ranges are `10.0.0.0/8`, `172.16.0.0/12`, and
48-
`192.168.0.0 16`. The agent will also treat link-local (169.254.0.0/16) as a non-masquerade
49-
CIDR by default. The agent is configured to reload its configuration from the location */etc/config/ip-masq-agent* every 60 seconds, which is also configurable.
47+
agent is configured to treat the three private IP ranges specified by
48+
[RFC 1918](https://tools.ietf.org/html/rfc1918) as non-masquerade
49+
[CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing).
50+
These ranges are `10.0.0.0/8`, `172.16.0.0/12`, and `192.168.0.0 16`.
51+
The agent will also treat link-local (169.254.0.0/16) as a non-masquerade CIDR by default.
52+
The agent is configured to reload its configuration from the location
53+
*/etc/config/ip-masq-agent* every 60 seconds, which is also configurable.
5054

5155
![masq/non-masq example](/images/docs/ip-masq.png)
5256

@@ -106,8 +110,12 @@ kubectl label nodes my-node node.kubernetes.io/masq-agent-ds-ready=true
106110
More information can be found in the ip-masq-agent documentation [here](https://github.com/kubernetes-sigs/ip-masq-agent)
107111

108112
In most cases, the default set of rules should be sufficient; however, if this is not the case
109-
for your cluster, you can create and apply a [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to customize the IP ranges that are affected. For example, to allow
110-
only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) in a file called "config".
113+
for your cluster, you can create and apply a
114+
[ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to customize the IP
115+
ranges that are affected. For example, to allow
116+
only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following
117+
[ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) in a file called
118+
"config".
111119

112120
{{< note >}}
113121
It is important that the file is called config since, by default, that will be used as the key

0 commit comments

Comments
 (0)