Hi to all,
I need to add a second interface to some of the specific K8s pods on GKE that need to be accessible directly from public users on the Internet. So I used Multus with defined a Macvlan CNI.
Pods can get the IP and can talk to each other just on the same node! So, there isn’t any access to other pods on other nodes with a second interface (net1) or VMs internal IPs.
Also, I created a new IP alias (10.20.20.0/24) for K8s and used that range for Macvlan. There is a default route (10.20.20.0/24) for the new range in VPC routes too.
So, what I am missing?
How I should make the second NIC accessible from outside of nodes or Internet?
Is there any restriction policy in GCP that doesn’t let do this?
PS: I did a test with Ipvlan to find if there is a MAC restriction policy on GCP, but the result was the same.