Enabling the host firewall breaks externalTrafficPolicy=Local services when using kube-proxy. This limitation is related to the fact that we redirect traffic from pods to remote nodes through a tunnel when the host firewall is enabled.
To reproduce the bug, one can comment the following line in e2e tests:
|
"global.hostFirewall": "false", |
Related: #12345.
Enabling the host firewall breaks
externalTrafficPolicy=Localservices when using kube-proxy. This limitation is related to the fact that we redirect traffic from pods to remote nodes through a tunnel when the host firewall is enabled.To reproduce the bug, one can comment the following line in e2e tests:
cilium/test/k8sT/Services.go
Line 1175 in f55ec90
Related: #12345.