Allow enabling Calico WireGuard encryption

Provide Helm values and templates to allow easy Helm-based configuration
of Calico WireGuard encryption.

Signed-off-by: Matt Nikkel <matt.nikkel@rancherfederal.com>
pull/169/head
Matt Nikkel 2021-10-07 16:28:09 -05:00 committed by Brad Davidson
parent 523e39ac18
commit 63c6ad9005
3 changed files with 5 additions and 3 deletions

View File

@ -3,4 +3,5 @@ kind: FelixConfiguration
metadata: metadata:
name: default name: default
spec: spec:
wireguardEnabled: {{ .Values.felixConfiguration.wireguardEnabled }}
featureDetectOverride: {{ .Values.felixConfiguration.featureDetectOverride }} featureDetectOverride: {{ .Values.felixConfiguration.featureDetectOverride }}

View File

@ -25,7 +25,7 @@
apiServer: apiServer:
enabled: true enabled: true
@@ -20,9 +36,23 @@ @@ -20,9 +36,24 @@
# Configuration for the tigera operator # Configuration for the tigera operator
tigeraOperator: tigeraOperator:
@ -49,6 +49,7 @@
+ strictAffinity: true + strictAffinity: true
+ autoAllocateBlocks: true + autoAllocateBlocks: true
+ +
+# Config required to fix RKE2 issue #1541
+felixConfiguration: +felixConfiguration:
+ wireguardEnabled: false
+ # Config required to fix RKE2 issue #1541
+ featureDetectOverride: "ChecksumOffloadBroken=true" + featureDetectOverride: "ChecksumOffloadBroken=true"

View File

@ -1,5 +1,5 @@
url: https://github.com/projectcalico/calico/releases/download/v3.20.1/tigera-operator-v3.20.1.tgz url: https://github.com/projectcalico/calico/releases/download/v3.20.1/tigera-operator-v3.20.1.tgz
packageVersion: 01 packageVersion: 02
additionalCharts: additionalCharts:
- workingDir: charts-crd - workingDir: charts-crd
crdOptions: crdOptions: