From 6fcc4e5b23e698881b2692dafb1a9f8d5a2b3f9a Mon Sep 17 00:00:00 2001
From: Dreaded_X <tim@huizinga.dev>
Date: Wed, 16 Apr 2025 15:46:40 +0200
Subject: [PATCH] Updated kube-vip

---
 infra/kube-vip/daemon-set-new.yaml | 95 ++++++++++++++++++++++++++++++
 infra/kube-vip/daemon-set.yaml     | 18 +++---
 2 files changed, 105 insertions(+), 8 deletions(-)
 create mode 100644 infra/kube-vip/daemon-set-new.yaml

diff --git a/infra/kube-vip/daemon-set-new.yaml b/infra/kube-vip/daemon-set-new.yaml
new file mode 100644
index 0000000..2dbf386
--- /dev/null
+++ b/infra/kube-vip/daemon-set-new.yaml
@@ -0,0 +1,95 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    app.kubernetes.io/name: kube-vip
+    app.kubernetes.io/version: v0.9.0
+  name: kube-vip
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kube-vip
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: kube-vip
+        app.kubernetes.io/version: v0.9.0
+    spec:
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: node-role.kubernetes.io/master
+                    operator: Exists
+              - matchExpressions:
+                  - key: node-role.kubernetes.io/control-plane
+                    operator: Exists
+              - matchExpressions:
+                  - key: feature.node.kubernetes.io/network-adapter
+                    operator: Exists
+      containers:
+        - args:
+            - manager
+          env:
+            - name: vip_arp
+              value: "true"
+            - name: port
+              value: "6443"
+            - name: vip_nodename
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: vip_interface
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.annotations['feature.node.kubernetes.io/network-adapter']
+            - name: vip_subnet
+              value: "32"
+            - name: dns_mode
+              value: first
+            - name: cp_enable
+              value: "true"
+            - name: cp_namespace
+              value: kube-system
+            - name: svc_enable
+              value: "true"
+            - name: svc_election
+              value: "true"
+            - name: svc_leasename
+              value: plndr-svcs-lock
+            - name: vip_leaderelection
+              value: "true"
+            - name: vip_leasename
+              value: plndr-cp-lock
+            - name: vip_leaseduration
+              value: "5"
+            - name: vip_renewdeadline
+              value: "3"
+            - name: vip_retryperiod
+              value: "1"
+            - name: address
+              value: 10.0.2.1
+            - name: prometheus_server
+              value: :2112
+            - name: enableUPNP
+              value: "true"
+          image: ghcr.io/kube-vip/kube-vip:v0.9.0
+          imagePullPolicy: IfNotPresent
+          name: kube-vip
+          resources: {}
+          securityContext:
+            capabilities:
+              add:
+                - NET_ADMIN
+                - NET_RAW
+              drop:
+                - ALL
+      hostNetwork: true
+      serviceAccountName: kube-vip
+      tolerations:
+        - effect: NoSchedule
+          operator: Exists
+        - effect: NoExecute
+          operator: Exists
+  updateStrategy: {}
diff --git a/infra/kube-vip/daemon-set.yaml b/infra/kube-vip/daemon-set.yaml
index b297806..98dbd68 100644
--- a/infra/kube-vip/daemon-set.yaml
+++ b/infra/kube-vip/daemon-set.yaml
@@ -2,18 +2,18 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
-    app.kubernetes.io/name: kube-vip
-    app.kubernetes.io/version: v0.8.3
-  name: kube-vip
+    app.kubernetes.io/name: kube-vip-ds
+    app.kubernetes.io/version: v0.9.0
+  name: kube-vip-ds
 spec:
   selector:
     matchLabels:
-      app.kubernetes.io/name: kube-vip
+      app.kubernetes.io/name: kube-vip-ds
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: kube-vip
-        app.kubernetes.io/version: v0.8.3
+        app.kubernetes.io/name: kube-vip-ds
+        app.kubernetes.io/version: v0.9.0
     spec:
       affinity:
         nodeAffinity:
@@ -44,7 +44,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.annotations['feature.node.kubernetes.io/network-adapter']
-            - name: vip_cidr
+            - name: vip_subnet
               value: "32"
             - name: dns_mode
               value: first
@@ -74,7 +74,7 @@ spec:
               value: :2112
             - name: enableUPNP
               value: "true"
-          image: ghcr.io/kube-vip/kube-vip:v0.8.3
+          image: ghcr.io/kube-vip/kube-vip:v0.9.0
           imagePullPolicy: IfNotPresent
           name: kube-vip
           resources: {}
@@ -83,6 +83,8 @@ spec:
               add:
                 - NET_ADMIN
                 - NET_RAW
+              drop:
+                - ALL
       hostNetwork: true
       serviceAccountName: kube-vip
       tolerations: