From 57063b0ec1baf33f0da0d4907a29c0e62f90c024 Mon Sep 17 00:00:00 2001
From: Udo Waechter <udo@maketank.net>
Date: Tue, 29 Sep 2020 14:32:52 +0200
Subject: [PATCH] this router cnfig works

---
 _sys/kube-router-all-service-daemonset.yaml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/_sys/kube-router-all-service-daemonset.yaml b/_sys/kube-router-all-service-daemonset.yaml
index 7635dbe..61357e2 100644
--- a/_sys/kube-router-all-service-daemonset.yaml
+++ b/_sys/kube-router-all-service-daemonset.yaml
@@ -18,9 +18,17 @@ data:
              "type":"bridge",
              "bridge":"kube-bridge",
              "isDefaultGateway":true,
+             "hairpinMode":true,
              "ipam":{
                 "type":"host-local"
              }
+          },
+          {
+             "type":"portmap",
+             "capabilities":{
+                "snat":true,
+                "portMappings":true
+             }
           }
        ]
     }
@@ -48,8 +56,13 @@ spec:
         args:
           - "--run-router=true"
           - "--run-firewall=true"
-          - "--run-service-proxy=true"
+          - "--run-service-proxy=false"
           - "--bgp-graceful-restart=true"
+          - "--hairpin-mode=true"
+          - "--enable-cni=true"
+          - "--advertise-cluster-ip"
+          - "--advertise-external-ip"
+          - "--advertise-loadbalancer-ip"
           - "--kubeconfig=/var/lib/kube-router/kubeconfig"
         securityContext:
           privileged: true