Add support for cilium ipsec (#7342)

* Add support for cilium ipsec

* Fix typo for bpffs
This commit is contained in:
Qasim Sarfraz
2021-03-23 21:46:06 +01:00
committed by GitHub
parent 4f89bfac48
commit d53fd29e34
7 changed files with 88 additions and 45 deletions

View File

@@ -166,6 +166,11 @@ spec:
readOnly: true
- mountPath: /run/xtables.lock
name: xtables-lock
{% if cilium_ipsec_enabled %}
- mountPath: /etc/ipsec
name: cilium-ipsec-secrets
readOnly: true
{% endif %}
dnsPolicy: ClusterFirstWithHostNet
hostNetwork: true
hostPID: false
@@ -280,6 +285,11 @@ spec:
- configMap:
name: cilium-config
name: cilium-config-path
{% if cilium_ipsec_enabled %}
- name: cilium-ipsec-secrets
secret:
secretName: cilium-ipsec-keys
{% endif %}
updateStrategy:
rollingUpdate:
# Specifies the maximum number of Pods that can be unavailable during the update process.