Skip to content

Commit 77d1001

Browse files
committed
kep/784: update design details
Signed-off-by: Daman Arora <[email protected]>
1 parent d1c6e90 commit 77d1001

File tree

1 file changed

+13
-11
lines changed
  • keps/sig-network/784-kube-proxy-component-config

1 file changed

+13
-11
lines changed

keps/sig-network/784-kube-proxy-component-config/README.md

Lines changed: 13 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -157,18 +157,19 @@ The mitigations to those risks:
157157
| v1alpha1 | v1alpha2 | DataType | Comments |
158158
|--------------------|--------------------------|--------------|----------------------------------------------------------------------------------------------------------------|
159159
| ClusterCIDR | DetectLocal.ClusterCIDRs | list[string] | list of CIDR ranges for detecting local traffic |
160-
| BindAddress | NodeIPOverride | list[string] | list of primary node IPs |
161160
| MetricsBindAddress | MetricsBindAddresses | list[string] | list of CIDR ranges that contain valid node IPs to expose metrics server, instead of host port(ip:port) format |
162161
| HealthzBindAddress | HealthzBindAddresses | list[string] | list of CIDR ranges that contain valid node IPs to expose healthz server, instead of host port(ip:port) format | |
163162

164163
### Following fields will be added
165-
| Field | DataType | Default Value | Comments |
166-
|----------------------|------------------|---------------|--------------------------------------------------------------------------------|
167-
| IPVS.MasqueradeBit | integer (32-bit) | 14 | IPVS will use this field instead of IPTables.MasqueradeBit |
168-
| Windows.RunAsService | boolean | false | new field for existing --windows-service command line flag |
169-
| ConfigHardFail | boolean | true | if set to true, kube-proxy will exit rather than just warning on config errors |
170-
| MetricsBindPort | integer (32-bit) | 10249 | port on which metrics server will be exposed |
171-
| HealthzBindPort | integer (32-bit) | 10256 | port on which helathz server will be exposed |
164+
| Field | DataType | Default Value | Comments |
165+
|----------------------|------------------|---------------|----------------------------------------------------------------------------------------------------------|
166+
| IPVS.MasqueradeBit | integer (32-bit) | 14 | IPVS will use this field instead of IPTables.MasqueradeBit |
167+
| Windows.RunAsService | boolean | false | new field for existing --windows-service command line flag |
168+
| ConfigHardFail | boolean | true | if set to true, kube-proxy will exit rather than just warning on config errors |
169+
| NodeIPOverride | list[string] | | list of primary node IPs |
170+
| IPFamilyPolicy | string | | controls nodeIP(s) detection, allowed values: [`SingleStack` \| `PreferDualStack` \| `RequireDualStack`] |
171+
| MetricsBindPort | integer (32-bit) | 10249 | port on which metrics server will be exposed |
172+
| HealthzBindPort | integer (32-bit) | 10256 | port on which helathz server will be exposed |
172173

173174
### Following fields will have different default values
174175
| Field | v1alpha1 (default) | v1alpha2 (default) |
@@ -178,9 +179,10 @@ The mitigations to those risks:
178179

179180

180181
### Following fields will be dropped
181-
| Key | Comments |
182-
|-----------|-----------------------------------------|
183-
| PortRange | dropped as no longer used by kube-proxy |
182+
| Key | Comments |
183+
|--------------|------------------------------------------|
184+
| PortRange | dropped as no longer used by kube-proxy |
185+
| BindAddress | dropped in favor of NodeIPOverride |
184186

185187

186188
### Test Plan

0 commit comments

Comments
 (0)