diff --git a/charts/kube-ovn/templates/ovncni-ds.yaml b/charts/kube-ovn/templates/ovncni-ds.yaml index 6537d225370..d0a848e210a 100644 --- a/charts/kube-ovn/templates/ovncni-ds.yaml +++ b/charts/kube-ovn/templates/ovncni-ds.yaml @@ -119,6 +119,7 @@ spec: - --ovs-vsctl-concurrency={{ .Values.performance.OVS_VSCTL_CONCURRENCY }} - --secure-serving={{- .Values.func.SECURE_SERVING }} - --enable-ovn-ipsec={{- .Values.func.ENABLE_OVN_IPSEC }} + - --set-tx-off={{- .Values.func.SET_TX_OFF }} securityContext: runAsUser: {{ include "kubeovn.runAsUser" . }} runAsGroup: 0 diff --git a/charts/kube-ovn/values.yaml b/charts/kube-ovn/values.yaml index 1a52064db16..b6bf4bf9cc8 100644 --- a/charts/kube-ovn/values.yaml +++ b/charts/kube-ovn/values.yaml @@ -75,6 +75,7 @@ func: ENABLE_NAT_GW: true ENABLE_OVN_IPSEC: false ENABLE_ANP: false + SET_TX_OFF: false ipv4: POD_CIDR: "10.16.0.0/16" diff --git a/dist/images/install.sh b/dist/images/install.sh index 051a5c69f08..51e1da13389 100755 --- a/dist/images/install.sh +++ b/dist/images/install.sh @@ -41,6 +41,7 @@ ENABLE_COMPACT=${ENABLE_COMPACT:-false} SECURE_SERVING=${SECURE_SERVING:-false} ENABLE_OVN_IPSEC=${ENABLE_OVN_IPSEC:-false} ENABLE_ANP=${ENABLE_ANP:-false} +SET_TX_OFF=${SET_TX_OFF:-false} # debug DEBUG_WRAPPER=${DEBUG_WRAPPER:-} @@ -4494,6 +4495,7 @@ spec: - --ovs-vsctl-concurrency=$OVS_VSCTL_CONCURRENCY - --secure-serving=${SECURE_SERVING} - --enable-ovn-ipsec=$ENABLE_OVN_IPSEC + - --set-tx-off=$SET_TX_OFF securityContext: runAsUser: ${RUN_AS_USER} runAsGroup: 0