Skip to content

Commit be20c54

Browse files
committed
fix: Update IPv6 routing rules for EKS clusters
The changes modify IPv6 routing configuration in Skipper deployment for healthz endpoints. IPv6 LAN routes (fd00::/8 and ::1/128) are now only included in non-EKS IPv6 environments, while EKS IPv6 configurations properly use the subnet values from environment variables.
1 parent 2290394 commit be20c54

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

cluster/manifests/skipper/deployment.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -328,13 +328,13 @@ spec:
328328
kube__healthz_down:
329329
Path("/kube-system/healthz") &&
330330
Shutdown() &&
331-
SourceFromLast("10.0.0.0/8", "192.168.0.0/16", "172.16.0.0/12", "127.0.0.1/8", "fd00::/8", "::1/128"{{- if and (eq .Cluster.Provider "zalando-eks") (eq .Cluster.ConfigItems.eks_ip_family "ipv6")}}{{ range $ip := split .Values.subnet_ipv6_cidrs "," }},"{{ $ip }}"{{ end }}{{- end }})
331+
SourceFromLast("10.0.0.0/8", "192.168.0.0/16", "172.16.0.0/12", "127.0.0.1/8"{{- if and (eq .Cluster.Provider "zalando-eks") (eq .Cluster.ConfigItems.eks_ip_family "ipv6")}}{{ range $ip := split .Values.subnet_ipv6_cidrs "," }},"{{ $ip }}"{{ end }}{{- else }}, "fd00::/8", "::1/128"{{- end }})
332332
-> disableAccessLog()
333333
-> status(503)
334334
-> <shunt>;
335335
kube__healthz_up:
336336
Path("/kube-system/healthz") &&
337-
SourceFromLast("10.0.0.0/8", "192.168.0.0/16", "172.16.0.0/12", "127.0.0.1/8", "fd00::/8", "::1/128"{{- if and (eq .Cluster.Provider "zalando-eks") (eq .Cluster.ConfigItems.eks_ip_family "ipv6")}}{{ range $ip := split .Values.subnet_ipv6_cidrs "," }},"{{ $ip }}"{{ end }}{{- end }})
337+
SourceFromLast("10.0.0.0/8", "192.168.0.0/16", "172.16.0.0/12", "127.0.0.1/8"{{- if and (eq .Cluster.Provider "zalando-eks") (eq .Cluster.ConfigItems.eks_ip_family "ipv6")}}{{ range $ip := split .Values.subnet_ipv6_cidrs "," }},"{{ $ip }}"{{ end }}{{- else }}, "fd00::/8", "::1/128"{{- end }})
338338
-> disableAccessLog()
339339
-> status(200)
340340
-> <shunt>;

0 commit comments

Comments
 (0)