diff options
| author | Fernando Serboncini <fserb@tailscale.com> | 2026-04-09 13:33:39 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-04-09 13:33:39 -0400 |
| commit | 6b7caaf7eefd520b187ab60086e8916b6269ef4b (patch) | |
| tree | 3def4e8c4c1c05808cf8433150d0983e5b7a1a9f | |
| parent | 27e6fed0c17902d1250cea4c44d7884a2a1ed41e (diff) | |
| download | tailscale-6b7caaf7eefd520b187ab60086e8916b6269ef4b.tar.xz tailscale-6b7caaf7eefd520b187ab60086e8916b6269ef4b.zip | |
cmd/k8s-operator: set PreferDualStack on ProxyGroup egress services (#19194)
On dual-stack clusters defaulting to IPv6, the ProxyGroup egress
service only got an IPv6 address, which causes request failures.
Individual egress proxies already set PreferDualStack correctly.
Fixes: #18768
Signed-off-by: Fernando Serboncini <fserb@tailscale.com>
| -rw-r--r-- | cmd/k8s-operator/egress-services.go | 3 | ||||
| -rw-r--r-- | cmd/k8s-operator/egress-services_test.go | 5 |
2 files changed, 5 insertions, 3 deletions
diff --git a/cmd/k8s-operator/egress-services.go b/cmd/k8s-operator/egress-services.go index 90ab2c882..4949db80a 100644 --- a/cmd/k8s-operator/egress-services.go +++ b/cmd/k8s-operator/egress-services.go @@ -457,7 +457,8 @@ func (esr *egressSvcsReconciler) clusterIPSvcForEgress(crl map[string]string) *c Labels: crl, }, Spec: corev1.ServiceSpec{ - Type: corev1.ServiceTypeClusterIP, + Type: corev1.ServiceTypeClusterIP, + IPFamilyPolicy: new(corev1.IPFamilyPolicyPreferDualStack), }, } } diff --git a/cmd/k8s-operator/egress-services_test.go b/cmd/k8s-operator/egress-services_test.go index d38284690..8443a1573 100644 --- a/cmd/k8s-operator/egress-services_test.go +++ b/cmd/k8s-operator/egress-services_test.go @@ -203,8 +203,9 @@ func clusterIPSvc(name string, extNSvc *corev1.Service) *corev1.Service { Labels: labels, }, Spec: corev1.ServiceSpec{ - Type: corev1.ServiceTypeClusterIP, - Ports: ports, + Type: corev1.ServiceTypeClusterIP, + IPFamilyPolicy: new(corev1.IPFamilyPolicyPreferDualStack), + Ports: ports, }, } } |