Skip to content

Commit b682a2b

Browse files
Abhishek KumarAbhishek Kumar
authored andcommitted
configured Kubernetes service with ipFamilyPolicy: PreferDualStack and both IPv6 and IPv4 families
1 parent f054c75 commit b682a2b

File tree

2 files changed

+8
-1
lines changed

2 files changed

+8
-1
lines changed

roles/baseline/defaults/main.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,8 @@ INGRESS_NGINX_IPV6_CONFIG:
102102
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: "ip"
103103
service.beta.kubernetes.io/aws-load-balancer-ip-address-type: "dualstack"
104104
service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
105-
ipFamilies: ["IPv6"]
105+
ipFamilyPolicy: "PreferDualStack"
106+
ipFamilies: ["IPv6", "IPv4"]
106107

107108
# Ingress-nginx - CVE-2021-25742 Mitigation
108109
INGRESS_NGINX_CVE_2021_25742_PATCH:

roles/common/tasks/main.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -278,6 +278,12 @@
278278
- tfstate.cluster_api_mode is defined
279279
- tfstate.cluster_api_mode.value|length > 0
280280
- V4_CFG_INGRESS_MODE is not defined
281+
- name: tfstate - enable ipv6 # noqa: name[casing]
282+
set_fact:
283+
V4_CFG_ENABLE_IPV6: "{{ tfstate.enable_ipv6.value }}"
284+
when:
285+
- tfstate.enable_ipv6 is defined
286+
- V4_CFG_ENABLE_IPV6 is not defined
281287
- name: tfstate - set tfstate to empty string # noqa: name[casing]
282288
set_fact:
283289
tfstate: ""

0 commit comments

Comments
 (0)