feat: add option to disable TCX in Cilium agent configuration

adapt to alinux4

Signed-off-by: l1b0k <[email protected]>

Author: l1b0k

cmd/terway-cli/policy.go

@@ -215,6 +215,7 @@ func runCilium(cfg *PolicyConfig) error {
 		"--ipam=delegated-plugin",
 		"--enable-bandwidth-manager=true",
 		"--agent-health-port=" + cfg.HealthCheckPort,
+		"--enable-tcx=false",
 	}
 
 	if cfg.EnableNetworkPolicy {

tests/kind/conf/eniip_datapathv2_cmdline

@@ -1 +1 @@
-cilium-agent--routing-mode=native--cni-chaining-mode=terway-chainer--enable-ipv4-masquerade=false--enable-ipv6-masquerade=false--disable-envoy-version-check=true--local-router-ipv4=169.254.10.1--local-router-ipv6=fe80:2400:3200:baba::1--enable-local-node-route=false--enable-endpoint-health-checking=false--enable-health-checking=false--enable-service-topology=true--k8s-heartbeat-timeout=0--enable-session-affinity=true--install-iptables-rules=false--enable-l7-proxy=false--ipam=delegated-plugin--enable-bandwidth-manager=true--agent-health-port=9099--enable-policy=never--labels=k8s:io\.kubernetes\.pod\.namespace--datapath-mode=veth--enable-endpoint-routes=true--enable-l2-neigh-discovery=false--enable-in-cluster-loadbalance=true--terway-host-stack-cidr=169.254.20.10/32
+cilium-agent--routing-mode=native--cni-chaining-mode=terway-chainer--enable-ipv4-masquerade=false--enable-ipv6-masquerade=false--disable-envoy-version-check=true--local-router-ipv4=169.254.10.1--local-router-ipv6=fe80:2400:3200:baba::1--enable-local-node-route=false--enable-endpoint-health-checking=false--enable-health-checking=false--enable-service-topology=true--k8s-heartbeat-timeout=0--enable-session-affinity=true--install-iptables-rules=false--enable-l7-proxy=false--ipam=delegated-plugin--enable-bandwidth-manager=true--agent-health-port=9099--enable-tcx=false--enable-policy=never--labels=k8s:io\.kubernetes\.pod\.namespace--datapath-mode=veth--enable-endpoint-routes=true--enable-l2-neigh-discovery=false--enable-in-cluster-loadbalance=true--terway-host-stack-cidr=169.254.20.10/32

tests/kind/conf/eniip_default_cmdline

@@ -1 +1 @@
-cilium-agent--routing-mode=native--cni-chaining-mode=terway-chainer--enable-ipv4-masquerade=false--enable-ipv6-masquerade=false--disable-envoy-version-check=true--local-router-ipv4=169.254.10.1--local-router-ipv6=fe80:2400:3200:baba::1--enable-local-node-route=false--enable-endpoint-health-checking=false--enable-health-checking=false--enable-service-topology=true--k8s-heartbeat-timeout=0--enable-session-affinity=true--install-iptables-rules=false--enable-l7-proxy=false--ipam=delegated-plugin--enable-bandwidth-manager=true--agent-health-port=9099--enable-policy=default--datapath-mode=veth--enable-endpoint-routes=true--enable-l2-neigh-discovery=false--enable-in-cluster-loadbalance=true--terway-host-stack-cidr=169.254.20.10/32
+cilium-agent--routing-mode=native--cni-chaining-mode=terway-chainer--enable-ipv4-masquerade=false--enable-ipv6-masquerade=false--disable-envoy-version-check=true--local-router-ipv4=169.254.10.1--local-router-ipv6=fe80:2400:3200:baba::1--enable-local-node-route=false--enable-endpoint-health-checking=false--enable-health-checking=false--enable-service-topology=true--k8s-heartbeat-timeout=0--enable-session-affinity=true--install-iptables-rules=false--enable-l7-proxy=false--ipam=delegated-plugin--enable-bandwidth-manager=true--agent-health-port=9099--enable-tcx=false--enable-policy=default--datapath-mode=veth--enable-endpoint-routes=true--enable-l2-neigh-discovery=false--enable-in-cluster-loadbalance=true--terway-host-stack-cidr=169.254.20.10/32

tests/kind/conf/eniip_legacy_ciliumargs_cmdline

@@ -1 +1 @@
-cilium-agent--routing-mode=native--cni-chaining-mode=terway-chainer--enable-ipv4-masquerade=false--enable-ipv6-masquerade=false--disable-envoy-version-check=true--local-router-ipv4=169.254.10.1--local-router-ipv6=fe80:2400:3200:baba::1--enable-local-node-route=false--enable-endpoint-health-checking=false--enable-health-checking=false--enable-service-topology=true--k8s-heartbeat-timeout=0--enable-session-affinity=true--install-iptables-rules=false--enable-l7-proxy=false--ipam=delegated-plugin--enable-bandwidth-manager=true--agent-health-port=9099--enable-policy=default--datapath-mode=veth--enable-endpoint-routes=true--enable-l2-neigh-discovery=false--enable-in-cluster-loadbalance=true--terway-host-stack-cidr=169.254.20.10/32
+cilium-agent--routing-mode=native--cni-chaining-mode=terway-chainer--enable-ipv4-masquerade=false--enable-ipv6-masquerade=false--disable-envoy-version-check=true--local-router-ipv4=169.254.10.1--local-router-ipv6=fe80:2400:3200:baba::1--enable-local-node-route=false--enable-endpoint-health-checking=false--enable-health-checking=false--enable-service-topology=true--k8s-heartbeat-timeout=0--enable-session-affinity=true--install-iptables-rules=false--enable-l7-proxy=false--ipam=delegated-plugin--enable-bandwidth-manager=true--agent-health-port=9099--enable-tcx=false--enable-policy=default--datapath-mode=veth--enable-endpoint-routes=true--enable-l2-neigh-discovery=false--enable-in-cluster-loadbalance=true--terway-host-stack-cidr=169.254.20.10/32