Merge pull request #488 from l1b0k/fix/l7_rules

policy: do not install l7 related rules
AliyunContainerService · May 10, 2023 · be9d03f · be9d03f
2 parents 60281e0 + b99002c
commit be9d03f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/policyinit.sh b/policy/policyinit.sh
@@ -65,6 +65,7 @@ if [ "$(terway_config_val 'eniip_virtual_type' | tr '[:upper:]' '[:lower:]')" =
          --agent-health-port=9099 --disable-envoy-version-check=true \
          --enable-local-node-route=false --ipv4-range=169.254.10.0/30 --ipv6-range=fe80:2400:3200:baba::/30 --enable-endpoint-health-checking=false \
          --enable-health-checking=false --enable-service-topology=true --disable-cnp-status-updates=true --k8s-heartbeat-timeout=0 --enable-session-affinity=true \
+         --install-iptables-rules=false --enable-l7-proxy=false \
          --ipam=cluster-pool ${extra_args}
   fi
 fi