Kube-proxy configured to be using proxy-mode = userspace and a really old version about puppetlabs-kubernetes HOT 6 CLOSED

@nickperry I have just tested the module on 1.9.4 with Weave and was able to install consul and hit the service. Can you open a separate issue? I am keen to see whats happening there. I don't want it to take over this issue.

Thanks in advance

from puppetlabs-kubernetes.

@mrwulf The userspace mode is set for backwards compatibility to 1.6 and we didnt want to support iptables. Here is a good explanation of the two options https://stackoverflow.com/questions/36088224/what-does-userspace-mode-means-in-kube-proxys-proxy-mode I am working on adding Calico support now. This will also fix the issue of the kube proxy versioning not available as a param

from puppetlabs-kubernetes.

I can't get any traffic to reach a destination pod via kube-proxy services in my puppetlabs-kubernetes module built 1.9.3 cluster (weave pod networking). However, I have no such problems on my kubeadm built clusters (also 1.9.3 with weave pod networking). They're using iptables mode and kube-proxy 1.9.3.

from puppetlabs-kubernetes.

I've added a PR that removes the explicit parameter, but allows you to specify the kube-proxy version. I did some testing (albeit only with newer versions of k8s) and couldn't notice/measure and difference between userspace or iptables modes. Nearly everyone uses iptables mode these days though, so default == better.

from puppetlabs-kubernetes.

@mrwulf As mentioned above we need to be able to support older versions of K8 as well. I am working internally on what that model looks like and how it affects the code base. I don't want if version throughout the code. It will just not scale.

from puppetlabs-kubernetes.

PR #82 is in now and allows a custom kube-proxy version. proxy-mode=userspace was removed so the proxy mode will be whatever the default is for that version. Pick a version with the default proxy-mode of iptables (or eventually ipvs) if you want something else.

from puppetlabs-kubernetes.