aws / aws/eks-anywhere

Provide a way to remove/install without kube-proxy

Open
#6,409 3 comments 5 reactions 0 assignees View on GitHub
area/cni area/configuration
Dominant language
Go
Stars
2.1k
Forks
328
Avg merge
1d 4h
Merged PRs (30d)
9

Description

**What would you like to be added**:
We would like to be able to remove the kube-proxy (OR install cluster without it at the first place) in a way how EKS-A will not reinstall/try to manage it so, we can use Cilium community in a kube-proxy replacement mode.

**Why is this needed**:
Due to several limitations/missing features in the bundled Cilium, we are replacing it with the community version of Cilium. We would like to start to use the community [Cilium's Gateway API implementation](https://docs.cilium.io/en/stable/network/servicemesh/gateway-api/gateway-api/#gs-gateway-api) for ingress. This requires Cilium to be in [kube-proxy replacement](https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#kubeproxy-free) mode.
That in turn requires us to remove the kube-proxy daemonset from the nodes after installation so, Cilium can replace it with it's own solution.

We may be able to remove the daemonset already (`kubectl -n kube-system delete ds kube-proxy`) but I guess EKS-A should be aware of this so, it will not try to reinstall it during an upgrade (or while using gitops).

Contributor guide

Open the contributing guide

Research direction

Start by investigating how EKS-A installs and reconciles the kube-proxy daemonset during initial cluster setup, upgrades, and GitOps use. Compare this with the reported `kubectl -n kube-system delete ds kube-proxy` workflow; done should allow community Cilium to provide kube-proxy replacement without EKS-A reinstalling or managing kube-proxy.

Written by the indexing model from the issue text.

Assessment

Domain
infrastructure, networking
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.