Skip to content

Cluster level Default EgressGateway

Introduction

Setting a default EgressGateway for the entire cluster can simplify the process of using EgressPolicy under a namespace or using EgressClusterPolicy at the cluster level, as it eliminates the need to specify the EgressGateway name each time. Please note that only one default EgressGateway can be set for the cluster.

Requirements

  • EgressGateway component is installed.

Steps

  1. When creating an EgressGateway, you can specify spec.clusterDefault as true to make it the default EgressGateway for the cluster. If spec.egressGatewayName is not specified in EgressClusterPolicy, and spec.egressGatewayName is not specified in EgressPolicy and the tenant has not configured a default EgressGateway, the cluster's default EgressGateway will be automatically used.

    apiVersion: egressgateway.spidernet.io/v1beta1
kind: EgressGateway
metadata:
  name: default
spec:
  clusterDefault: true
  ippools:
    ipv4:
      - 10.6.1.55
      - 10.6.1.56
    ipv4DefaultEIP: 10.6.1.55
    ipv6:
      - fd00::55
      - fd00::56
    ipv6DefaultEIP: fd00::56
  nodeSelector:
    selector:
      matchLabels:
        egress: "true"

  2. Use the following definition to create an EgressPolicy, ignoring the definition of the spec.egressGatewayName field:

    apiVersion: egressgateway.spidernet.io/v1beta1
kind: EgressPolicy
metadata:
  name: mock-app
spec:
  appliedTo:
    podSelector:
      matchLabels:
        app: mock-app
  destSubnet:
    - 10.6.1.92/32

  3. Run the following command again to confirm that the EgressPolicy has been set to the default EgressGateway:

    $ kubectl get egresspolicies mock-app -o yaml
apiVersion: egressgateway.spidernet.io/v1beta1
kind: EgressPolicy
metadata:
  creationTimestamp: "2023-08-09T11:54:34Z"
  generation: 1
  name: mock-app
  namespace: default
  resourceVersion: "6233341"
  uid: 5692c5e6-a72b-41bd-a611-1106abd41bc2
spec:
  appliedTo:
    podSelector:
      matchLabels:
        app: mock-app
  destSubnet:
  - 10.6.1.92/32
  - fd00::92/128
  - 172.30.40.0/21
  egressGatewayName: default