fix: calico backend config #973

ezdown

@@ -165,6 +165,15 @@ EOF
     sed -i 's/^SELINUX=.*$/SELINUX=disabled/g' /etc/selinux/config
   fi
 
+  logger info "clean iptable rules"
+  iptables -P INPUT ACCEPT && \
+  iptables -P FORWARD ACCEPT && \
+  iptables -P OUTPUT ACCEPT && \
+  iptables -F && iptables -X && \
+  iptables -F -t nat && iptables -X -t nat && \
+  iptables -F -t raw && iptables -X -t raw && \
+  iptables -F -t mangle && iptables -X -t mangle
+
   logger debug "enable and start docker"
   systemctl enable docker
   systemctl daemon-reload && systemctl restart docker && sleep 4

roles/calico/templates/calico-v3.15.yaml.j2

@@ -305,11 +305,15 @@ spec:
             - name: IP_AUTODETECTION_METHOD
               value: "{{ IP_AUTODETECTION_METHOD }}"
             # Enable IPIP
+{% if CALICO_NETWORKING_BACKEND == "brid" %}
             - name: CALICO_IPV4POOL_IPIP
               value: "{{ CALICO_IPV4POOL_IPIP }}"
+{% endif %}
             # Enable or Disable VXLAN on the default IP pool.
+{% if CALICO_NETWORKING_BACKEND == "vxlan" %}
             - name: CALICO_IPV4POOL_VXLAN
               value: "Never"
+{% endif %}
             # Set MTU for tunnel device used if ipip is enabled
             - name: FELIX_IPINIPMTU
               valueFrom:

roles/calico/templates/calico-v3.3.yaml.j2

@@ -156,8 +156,15 @@ spec:
             - name: IP_AUTODETECTION_METHOD
               value: "{{ IP_AUTODETECTION_METHOD }}"
             # Enable IPIP
+{% if CALICO_NETWORKING_BACKEND == "brid" %}
             - name: CALICO_IPV4POOL_IPIP
               value: "{{ CALICO_IPV4POOL_IPIP }}"
+{% endif %}
+            # Enable or Disable VXLAN on the default IP pool.
+{% if CALICO_NETWORKING_BACKEND == "vxlan" %}
+            - name: CALICO_IPV4POOL_VXLAN
+              value: "Never"
+{% endif %}
             # Set MTU for tunnel device used if ipip is enabled
             - name: FELIX_IPINIPMTU
               valueFrom:

roles/calico/templates/calico-v3.4.yaml.j2

@@ -194,8 +194,15 @@ spec:
             - name: IP_AUTODETECTION_METHOD
               value: "{{ IP_AUTODETECTION_METHOD }}"
             # Enable IPIP
+{% if CALICO_NETWORKING_BACKEND == "brid" %}
             - name: CALICO_IPV4POOL_IPIP
               value: "{{ CALICO_IPV4POOL_IPIP }}"
+{% endif %}
+            # Enable or Disable VXLAN on the default IP pool.
+{% if CALICO_NETWORKING_BACKEND == "vxlan" %}
+            - name: CALICO_IPV4POOL_VXLAN
+              value: "Never"
+{% endif %}
             # Set MTU for tunnel device used if ipip is enabled
             - name: FELIX_IPINIPMTU
               valueFrom:

roles/calico/templates/calico-v3.8.yaml.j2

@@ -294,8 +294,15 @@ spec:
             - name: IP_AUTODETECTION_METHOD
               value: "{{ IP_AUTODETECTION_METHOD }}"
             # Enable IPIP
+{% if CALICO_NETWORKING_BACKEND == "brid" %}
             - name: CALICO_IPV4POOL_IPIP
               value: "{{ CALICO_IPV4POOL_IPIP }}"
+{% endif %}
+            # Enable or Disable VXLAN on the default IP pool.
+{% if CALICO_NETWORKING_BACKEND == "vxlan" %}
+            - name: CALICO_IPV4POOL_VXLAN
+              value: "Never"
+{% endif %}
             # Set MTU for tunnel device used if ipip is enabled
             - name: FELIX_IPINIPMTU
               valueFrom: