Skip to content

Feat: cilium routing mode setting #12588

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tico88612 wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Feat: cilium routing mode setting #12588

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions roles/network_plugin/cilium/defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,9 @@ cilium_cpu_limit: 500m
cilium_memory_requests: 64M
cilium_cpu_requests: 100m

# Enable native-routing mode or tunneling mode.
cilium_routing_mode: tunnel

# Overlay Network Mode
cilium_tunnel_mode: vxlan

Expand Down
2 changes: 2 additions & 0 deletions roles/network_plugin/cilium/templates/values.yaml.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,8 @@ healthPort: {{ cilium_agent_health_port }}

identityAllocationMode: {{ cilium_identity_allocation_mode }}

routingMode: {{ cilium_routing_mode }}

Copy link

@ayoubfaouzi ayoubfaouzi Oct 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if cilium_routing_mode is native, we should skip routingMode: {{ cilium_routing_mode }} entirely, otherwise, cilium complains.

Copy link

@mhkarimi1383 mhkarimi1383 Oct 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I this should be allowed here and should be passed directly to cilium, for example if cilium introduce a new feature or something like that we can't handle, I think keeping this simple is a better approach

Copy link
Member Author

@tico88612 tico88612 Oct 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ayoubfaouzi Why? If you skip this, that's not working. routingMode default is tunnel.

Copy link

@ayoubfaouzi ayoubfaouzi Oct 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh sorry, what I wanted to say was, when I deployed kubespray with cilium as CNI, I want to use native routing mode, so no tunneling. I modified cilium_tunnel_mode to disabled as in the doc.

However cilium kept complaining about disabled, looks like it did not get it (should be only vxlan or geneve), so I had to edit the cm and completely get rid of cilium_tunnel_mode and add routing-mode: native.

Copy link
Member Author

@tico88612 tico88612 Oct 9, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Or maybe you try an empty string? the cilium docs said cilium_tunnel_mode only accepted "", "vxlan", "geneve"

Copy link

@satishdotpatel satishdotpatel Nov 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, I am on same boat. cilium_tunnel_mode only accept vxlan or geneve. I tried empty string which started throwing errors.

For now I just kept tunnel-protocol to vxlan. Hope its acceptable value with routing mode native.

tunnelProtocol: {{ cilium_tunnel_mode }}

loadbalancer:
Expand Down