OKE VCN Native Cilium

OKE_CILIUM.md

OKE @ v1.26.2 have OKE CNI without ipvlan. Native veth chaining works.

• CNI Config (merged from /etc/cni/net.d/10-oci.conflist on the OS):

  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: cni-configuration
    namespace: cilium # same namespace as cilium (e.g. kube-system)
  data:
    cni-config: |-
      {
        "name": "oci-cilium",
        "cniVersion": "0.3.1",
        "plugins": [
          {
            "cniVersion": "0.3.1",
            "type": "oci-ipvlan",
            "mode": "l2",
            "kubernetesServiceCidr": "10.111.8.0/21",
            "ipam": {
              "type": "oci-ipam"
            }
          },
          {
            "cniVersion": "0.3.1",
            "type": "oci-ptp",
            "containerInterface": "ptp-veth0",
            "mtu": 9000,
            "kubernetesServiceCidr": "10.111.8.0/21"
          },
          {
            "type": "cilium-cni",
            "chaining-mode": "generic-veth"
          }
        ]
      }

• helm values:

  cni:
    chainingMode: generic-veth
    customConf: true
    configMap: cni-configuration # from above
  routingMode: native
  enableIPv4Masquerade: false