| Key | +Type | +Default | +Description | + + +
|---|---|---|---|
| clusterDomain | +string | +
+"cluster.local"
+
+ |
+ Domain used by the cluster. | +
| fullnameOverride | +string | +
+""
+
+ |
+ Full name override. | +
| global | +object | +
+{
+ "images": {
+ "kubeovn": {
+ "repository": "kube-ovn",
+ "support_arm": true,
+ "tag": "v1.14.0",
+ "thirdparty": true,
+ "vpcRepository": "vpc-nat-gateway"
+ }
+ },
+ "registry": {
+ "address": "docker.io/kubeovn",
+ "imagePullSecrets": []
+ }
+}
+
+ |
+ Global configuration. | +
| image | +object | +
+"{}"
+
+ |
+ Image configuration. | +
| image.pullPolicy | +string | +
+"IfNotPresent"
+
+ |
+ Pull policy for all images. | +
| masterNodes | +list | +
+[]
+
+ |
+ Comma-separated list of IPs for each master node. If not specified, fallback to auto-identifying masters based on "masterNodesLabels" | +
| masterNodesLabels | +object | +
+{
+ "kube-ovn/role": "master"
+}
+
+ |
+ Label used to auto-identify masters. Any node that has any of these labels will be considered a master node. Note: This feature uses Helm "lookup" function, which is not compatible with tools such as ArgoCD. | +
| nameOverride | +string | +
+""
+
+ |
+ Name override. | +
| namespace | +string | +
+"kube-system"
+
+ |
+ Namespace in which the CNI is deployed. | +
| Whether to mount the node's tooling directory into the pod. | +||||
| cni.nonPrimaryCNI | +bool | +
+false
+
+ |
+ Whether to use Kube-OVN as non-primary CNI. When set to true, Kube-OVN will not allocate/handle primary network interfaces. Interfaces are created using Network Attachment Definitions (NADs) | +|
| cni.toolingDirectory | string | @@ -674,139 +791,149 @@ falseobject |
{
- "CHECK_GATEWAY": true,
"ENABLE_ANP": false,
"ENABLE_BIND_LOCAL_IP": true,
- "ENABLE_EXTERNAL_VPC": true,
- "ENABLE_IC": false,
- "ENABLE_KEEP_VM_IP": true,
- "ENABLE_LB": true,
- "ENABLE_LB_SVC": false,
- "ENABLE_LIVE_MIGRATION_OPTIMIZE": true,
- "ENABLE_NAT_GW": true,
- "ENABLE_NP": true,
- "ENABLE_OVN_IPSEC": false,
+ "ENABLE_DNS_NAME_RESOLVER": false,
"ENABLE_OVN_LB_PREFER_LOCAL": false,
- "ENABLE_TPROXY": false,
- "HW_OFFLOAD": false,
- "LOGICAL_GATEWAY": false,
"LS_CT_SKIP_DST_LPORT_IPS": true,
"LS_DNAT_MOD_DL_DST": true,
"OVSDB_CON_TIMEOUT": 3,
"OVSDB_INACTIVITY_TIMEOUT": 10,
- "SECURE_SERVING": false,
"SET_VXLAN_TX_OFF": false,
- "U2O_INTERCONNECTION": false
+ "enableExternalVpcs": false,
+ "enableHardwareOffload": false,
+ "enableKeepVmIps": true,
+ "enableLiveMigrationOptimization": true,
+ "enableLoadbalancer": true,
+ "enableLoadbalancerService": false,
+ "enableNatGateways": true,
+ "enableNetworkPolicies": true,
+ "enableOvnInterconnections": false,
+ "enableOvnIpsec": false,
+ "enableSecureServing": false,
+ "enableTproxy": false,
+ "enableU2OInterconnections": false
}
|
Features of Kube-OVN we wish to enable/disable. |
| Key | -Type | -Default | -Description | - -||||
|---|---|---|---|---|---|---|---|
| fullnameOverride | -string | +features.enableExternalVpcs | +bool |
-""
+false
|
- Full name override. | +Enable external VPCs | |
| global | -object | +features.enableHardwareOffload | +bool |
-{
- "images": {
- "kubeovn": {
- "repository": "kube-ovn",
- "support_arm": true,
- "tag": "v1.14.0",
- "thirdparty": true,
- "vpcRepository": "vpc-nat-gateway"
- }
- },
- "registry": {
- "address": "docker.io/kubeovn",
- "imagePullSecrets": []
- }
-}
+false
|
- Global configuration. | +Enable hardware offloads | |
| image | -object | -
-"{}"
+ | |||||
| image.pullPolicy | -string | +features.enableLiveMigrationOptimization | +bool |
-"IfNotPresent"
+true
|
- Pull policy for all images. | +Enable optimized live migrations for VMs | |
| masterNodes | -string | +features.enableLoadbalancer | +bool |
-""
+true
|
- Comma-separated list of IPs for each master node. | +Enable Kube-OVN loadbalancers | |
| masterNodesLabel | -string | +features.enableLoadbalancerService | +bool |
-"kube-ovn/role=master"
+false
|
- Label used to auto-identify masters. | +Enable Kube-OVN loadbalancer services | |
| nameOverride | -string | +features.enableNatGateways | +bool |
-""
+true
|
- Name override. | +Enable NAT gateways | |
| namespace | -string | +features.enableNetworkPolicies | +bool |
-"kube-system"
+true
|
- Namespace in which the CNI is deployed. | +Enable Kube-OVN network policies | |
| clusterDomain | -string | +features.enableOvnInterconnections | +bool |
-"cluster.local"
+false
|
- Domain used by the cluster. | +Enable OVN interconnections | +|
| features.enableOvnIpsec | +bool | +
+false
+
+ |
+ Enable IPSEC | +||||
| features.enableSecureServing | +bool | +
+false
+
+ |
+ Enable secure serving | +||||
| features.enableTproxy | +bool | +
+false
+
+ |
+ Enable TProxy | +||||
| features.enableU2OInterconnections | +bool | +
+false
+
+ |
+ Enable underlay to overlay interconnections |
-"v1.14.0"
+"v1.15.0"
| Key | +Type | +Default | +Description | + + +
|---|---|---|---|
| networkPolicies | +object | +
+"{}"
+
+ |
+ Configuration for network policies | +
| networkPolicies.enforcement | +string | +
+"standard"
+
+ |
+ Enforcement level of network policies when they get applied (can be: standard, lax). Enforcement "standard" blocks everything except what is allowed by the network policies. Enforcement "lax" is similar to "standard" with the exception that ARP/DHCPv4/DHCPv6/ICMPv4/ICMPv6 is allowed by default. This mode is useful when using Kubevirt and VMs with IPs configured via Kube-OVN's DHCP. | +
| IPv6 CIDR. | +|||
| networking.pods.enableGatewayChecks | +bool | +
+true
+
+ |
+ Enable default gateway checks | +
| networking.pods.enableLogicalGateways | +bool | +
+false
+
+ |
+ Enable logical gateways | +
| networking.pods.gateways | object | @@ -1390,7 +1564,7 @@ false "{}" -DPDK-hybrid support for OVS. ref: https://kubeovn.github.io/docs/v1.13.x/en/advance/dpdk/ | +DPDK-hybrid support for OVS. ref: https://kubeovn.github.io/docs/v1.12.x/en/advance/dpdk/ |
| ovsOvn.dpdkHybrid.enabled | @@ -1401,15 +1575,6 @@ falseEnables DPDK-hybrid support on OVS. | ||
| ovsOvn.dpdkHybrid.tag | -string | -
-"v1.14.0-dpdk"
-
- |
- DPDK image tag. | -
| ovsOvn.dpdkHybrid.resources | object | @@ -1429,6 +1594,15 @@ falseovs-ovn resource limits & requests when DPDK-hybrid is enabled. ref: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ | |
| ovsOvn.dpdkHybrid.tag | +string | +
+"v1.14.0-dpdk"
+
+ |
+ DPDK image tag. | +
| ovsOvn.labels | object | @@ -1762,3 +1936,24 @@ false
| Key | +Type | +Default | +Description | + + +
|---|---|---|---|
| ovsOvn.ovsIpsecKeysDirectory | +string | +
+"/etc/origin/ovs_ipsec_keys"
+
+ |
+ Directory on the node where Open vSwitch (OVS) IPSEC keys live. | +