cilium

Documentation

Index

• Constants

Constants

const (
	// Make Cilium take ownership over the `/etc/cni/net.d` directory on the
	// node, renaming all non-Cilium CNI configurations to `*.cilium_bak`.
	// This ensures no Pods can be scheduled using other CNI plugins during Cilium
	// agent downtime.
	// Leave this unset if you wish to use other CNIs such as Multus.
	AnnotationCNIExclusive = "k8sd/v1alpha1/cilium/cni-exclusive"

	// List of devices facing cluster/external network (used for BPF
	// NodePort, BPF masquerading and host firewall); supports '+' as
	// wildcard in device name, e.g. 'eth+'
	// e.g. k8sd/v1alpha1/cilium/devices="eth+ lxdbr+"
	AnnotationDevices = "k8sd/v1alpha1/cilium/devices"

	// Device name used to connect nodes in direct routing mode (used by
	// BPF NodePort, BPF host routing; if empty, automatically set to a
	// device with k8s InternalIP/ExternalIP or with a default route
	// bridge type devices are ignored in automatic selection
	AnnotationDirectRoutingDevice = "k8sd/v1alpha1/cilium/direct-routing-device"

	// Comma separated list of VLAN tags to bypass eBPF filtering on native
	// devices. Cilium enables firewalling on native devices and filters
	// all unknown traffic, including VLAN 802.1q packets, which pass
	// through the main device with the associated tag (e.g., VLAN device
	// eth0.4000 and its main interface eth0). Supports '0' as wildcard for
	// bypassing all VLANs.
	// e.g., k8sd/v1alpha1/cilium/vlan-bpf-bypass="4001,4002"
	AnnotationVLANBPFBypass = "k8sd/v1alpha1/cilium/vlan-bpf-bypass"

	// Enable the Cilium SCTP feature.
	AnnotationSCTPEnabled = "k8sd/v1alpha1/cilium/sctp/enabled"

	// Set the VXLAN tunnel port. if not provided, Cilium default values
	// will be used. The default values are defined here:
	// https://docs.cilium.io/en/stable/operations/system_requirements/
	// In cases where you have specific firewall requirements or you have
	// fan networking enabled on your underlay network with the same vxlan
	// destination port, setting this option to a different port could mitigate
	// the issues.
	// e.g., k8sd/v1alpha1/cilium/tunnel-port="8472"
	AnnotationTunnelPort = "k8sd/v1alpha1/cilium/tunnel-port"
)