Disable kube_proxy_masquerade_all

Fixes #1012
2017-02-10 13:16:19 +03:00 · 2017-02-10 13:16:19 +03:00 · 2c532cb74d
parent 779f20d64e
commit 2c532cb74d
1 changed files with 3 additions and 2 deletions
--- a/roles/kubernetes/node/defaults/main.yml
+++ b/roles/kubernetes/node/defaults/main.yml
@ -6,8 +6,9 @@ kube_resolv_conf: "/etc/resolv.conf"

 kube_proxy_mode: iptables

-# If using the pure iptables proxy, SNAT everything
-kube_proxy_masquerade_all: true
+# If using the pure iptables proxy, SNAT everything. Note that it breaks any
+# policy engine.
+kube_proxy_masquerade_all: false

 # Limits for kube components and nginx load balancer app
 kubelet_memory_limit: 512M