From 92be486f3960657e1d2faf1556a09566957c77ea Mon Sep 17 00:00:00 2001 From: q3k Date: Sat, 29 Jun 2019 22:58:19 +0000 Subject: [PATCH] Revert "cluster/kube/lib/nginx: use Local traffic policy" This reverts commit 09a0f06d2a0a3fdc2c80c0a4630bd976e3bbc966. Reason for revert: prevents registry from being accessible on nodes: q3k@anathema ~/Software/hscloud $ curl registry.k0.hswaw.net [..., ok] [root@bc01n03:~]# curl registry.k0.hswaw.net ^C Change-Id: I0da97aaf7a8791ea3f62c70b6c1502f4a48a300f --- cluster/kube/lib/nginx.libsonnet | 4 ---- 1 file changed, 4 deletions(-) diff --git a/cluster/kube/lib/nginx.libsonnet b/cluster/kube/lib/nginx.libsonnet index 52ff93cf..a871b96d 100644 --- a/cluster/kube/lib/nginx.libsonnet +++ b/cluster/kube/lib/nginx.libsonnet @@ -142,10 +142,6 @@ local kube = import "../../../kube/kube.libsonnet"; target_pod:: env.deployment.spec.template, spec+: { type: "LoadBalancer", - // The nginx ingress instrance is single-instance and metallb l2 (which we run) - // does SNAT on 'Cluster', thereby losing the source IP address. - // See: https://metallb.universe.tf/usage/#cluster-traffic-policy - externalTrafficPolicy: "Local", ports: [ { name: "ssh", port: 22, targetPort: 22, protocol: "TCP" }, { name: "http", port: 80, targetPort: 80, protocol: "TCP" },