IPv6 support

hetzner/deployments/cilium.yaml

@@ -14,6 +14,9 @@ operator:
 
 identityAllocationMode: crd
 
+bpf:
+  masquerade: false
+
 cni:
   install: true
 
@@ -31,7 +34,7 @@ healthChecking: true
 ipv4:
   enabled: true
 ipv6:
-  enabled: false
+  enabled: true
 hostServices:
   enabled: false
 hostPort:
@@ -43,6 +46,7 @@ externalIPs:
 
 k8s:
   requireIPv4PodCIDR: true
+  requireIPv6PodCIDR: true
 
 prometheus:
   enabled: true

hetzner/deployments/cilium_result.yaml

@@ -57,7 +57,7 @@ data:
 
   # Enable IPv6 addressing. If enabled, all endpoints are allocated an IPv6
   # address.
-  enable-ipv6: "false"
+  enable-ipv6: "true"
   # Users who wish to specify their own custom CNI configuration file must set
   # custom-cni-conf to "true", otherwise Cilium may overwrite the configuration.
   custom-cni-conf: "false"
@@ -130,7 +130,7 @@ data:
 
   enable-ipv4-masquerade: "true"
   enable-ipv6-masquerade: "true"
-  enable-bpf-masquerade: "true"
+  enable-bpf-masquerade: "false"
 
   enable-xt-socket-fallback: "true"
   install-iptables-rules: "true"
@@ -148,6 +148,7 @@ data:
   enable-auto-protect-node-port-range: "true"
   enable-session-affinity: "true"
   k8s-require-ipv4-pod-cidr: "true"
+  k8s-require-ipv6-pod-cidr: "true"
   enable-endpoint-health-checking: "true"
   enable-health-checking: "true"
   enable-well-known-identities: "false"

hetzner/templates/controlplane.yaml.tpl

@@ -67,7 +67,13 @@ cluster:
       - "${lbv4}"
       - "${lbv6}"
       - "${ipv4}"
-  controllerManager: {}
+    extraArgs:
+        feature-gates: IPv6DualStack=true
+  controllerManager:
+    extraArgs:
+        feature-gates: IPv6DualStack=true
+        node-cidr-mask-size-ipv4: 24
+        node-cidr-mask-size-ipv6: 112
   scheduler: {}
   etcd: {}
   inlineManifests: