Skip to content

Commit

Permalink
ironic: change traffic policy for pxe-service
Browse files Browse the repository at this point in the history
Calico now uses a additional BGPFilter that will surpress service
subnets announcements (147.204.35.128/27, 130.214.232.16/28,
10.46.101.0/24). Only /32 host routes for Services will be
announced by nodes. Thus breaking TFTP/iPXE traffic. The traffic
would reach the cluster but not the service. We need to add the
`externalTrafficPolicy: local` to make this work.

Increasing the chart version to track this.
  • Loading branch information
sandzwerg committed Dec 16, 2024
1 parent 93cc104 commit 9a6df04
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 1 deletion.
2 changes: 1 addition & 1 deletion openstack/ironic/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ apiVersion: v2
description: A Helm chart for Kubernetes
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Ironic/OpenStack_Project_Ironic_vertical.png
name: ironic
version: 0.1.6
version: 0.1.7
dependencies:
- condition: mariadb.enabled
name: mariadb
Expand Down
1 change: 1 addition & 0 deletions openstack/ironic/templates/pxe-service.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ metadata:
{{- include "utils.linkerd.pod_and_service_annotation" . | indent 4 }}
spec:
type: NodePort
externalTrafficPolicy: Local
selector:
name: ironic-pxe
ports:
Expand Down

0 comments on commit 9a6df04

Please sign in to comment.