alt Hacker NewsSome CNIs are definitely better than others. Unfortunately it seems 99% of people want to work against the k8s networking model.
Some CNIs are definitely better than others. Unfortunately it seems 99% of people want to work against the k8s networking model.
Shit just gets really weird when your network isn’t split for k8s in an equivalent way to what GCP/AWS expect. Like, if you have other services running on the nodes that you want things inside k8s to talk to, or if the nodes are in a flat subnet with other stuff in it, things get annoying. Those are worst practices for a reason, but pretty common in environments with home rolled k8s clusters.