Disable masquerading when cilium is in ENI mode.

giantswarm · Oct 9, 2023 · d507cba · d507cba
1 parent 24bece4
commit d507cba
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/service/controller/resource/clusterconfigmap/desired.go b/service/controller/resource/clusterconfigmap/desired.go
@@ -244,6 +244,7 @@ func (r *Resource) GetDesiredState(ctx context.Context, obj interface{}) ([]*cor
 			},
 		}
 
+		ciliumValues["egressMasqueradeInterfaces"] = "eth0"
 		ciliumValues["enableIPv4Masquerade"] = false
 		ciliumValues["tunnel"] = "disabled"
 		// Used by cilium to tag ENIs it creates and be able to filter and clean them up.