diff --git a/roles/network_plugin/calico/defaults/main.yml b/roles/network_plugin/calico/defaults/main.yml index 17f1706c42c7e26d83c31b87a840ee36cd0bf394..ae1b65dc17407b186b4b38dc63074ac64cf8b56e 100644 --- a/roles/network_plugin/calico/defaults/main.yml +++ b/roles/network_plugin/calico/defaults/main.yml @@ -10,6 +10,7 @@ calico_ipv4pool_ipip: "Off" calico_ipip_mode: Never # valid values are 'Always', 'Never' and 'CrossSubnet' calico_vxlan_mode: Always # valid values are 'Always', 'Never' and 'CrossSubnet' +# Calico doesn't support ipip tunneling for the IPv6. calico_ipip_mode_ipv6: Never calico_vxlan_mode_ipv6: Never calico_pool_blocksize_ipv6: 116 diff --git a/roles/network_plugin/calico/tasks/check.yml b/roles/network_plugin/calico/tasks/check.yml index 0b164534a8a6c27258860cab90e0cbfc502fd7ad..b961bdf40d15a8b29af722c4ef25c4c03f880b2e 100644 --- a/roles/network_plugin/calico/tasks/check.yml +++ b/roles/network_plugin/calico/tasks/check.yml @@ -173,3 +173,13 @@ - typha_enabled run_once: True delegate_to: "{{ groups['kube_control_plane'][0] }}" + +- name: "Check ipip mode is Nerver for calco ipv6" + assert: + that: + - "calico_ipip_mode_ipv6 in ['Never']" + msg: "Calico doesn't support ipip tunneling for the IPv6" + when: + - enable_dual_stack_networks + run_once: True + delegate_to: "{{ groups['kube_control_plane'][0] }}"