Disable controller-manager allocate-node-cidrs for cilium cluster-pool ipam (#13148)

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

roles/kubernetes/control-plane/templates/kubeadm-config.v1beta4.yaml.j2

@@ -365,7 +365,16 @@ controllerManager:
 {% endif %}
   - name: service-cluster-ip-range
     value: "{{ kube_service_subnets }}"
-{% if kube_network_plugin is defined and kube_network_plugin == "calico" and not calico_ipam_host_local %}
+{% if (
+    kube_network_plugin is defined and
+    kube_network_plugin == "calico" and
+    not calico_ipam_host_local
+  ) or (
+    kube_network_plugin is defined and
+    kube_network_plugin == "cilium" and
+    cilium_ipam_mode == "cluster-pool"
+  )
+%}
   - name: allocate-node-cidrs
     value: "false"
 {% else %}

roles/kubespray_defaults/defaults/main/main.yml

@@ -233,6 +233,10 @@ cilium_deploy_additionally: false
 #   - Ref: https://docs.cilium.io/en/stable/internals/cilium_operator/#kvstore-operations
 cilium_identity_allocation_mode: crd
 
+# The default IP address management mode is "Cluster Scope".
+# https://docs.cilium.io/en/stable/concepts/networking/ipam/
+cilium_ipam_mode: cluster-pool
+
 # Determines if calico_rr group exists
 peer_with_calico_rr: "{{ 'calico_rr' in groups and groups['calico_rr'] | length > 0 }}"
 

roles/network_plugin/cilium/defaults/main.yml

@@ -171,10 +171,6 @@ cilium_hubble_peer_service_cluster_domain: "{{ dns_domain }}"
 
 cilium_gateway_api_enabled: false
 
-# The default IP address management mode is "Cluster Scope".
-# https://docs.cilium.io/en/stable/concepts/networking/ipam/
-cilium_ipam_mode: cluster-pool
-
 # Cluster Pod CIDRs use the kube_pods_subnet value by default.
 # If your node network is in the same range you will lose connectivity to other nodes.
 # Defaults to kube_pods_subnet if not set.