From aefd8b45ffaf3cac30443a0540a16c14f3bb10fa Mon Sep 17 00:00:00 2001 From: Andrei Kvapil Date: Tue, 31 Mar 2026 11:30:25 +0200 Subject: [PATCH] fix(multus): pin master CNI to 05-cilium.conflist Set multusMasterCNI to explicitly use 05-cilium.conflist instead of auto-detecting the first available conflist at boot. This prevents a race condition where multus picks 10-kube-ovn.conflist if it appears before 05-cilium.conflist during node startup, bypassing the Cilium CNI chain entirely. Upstream issue: https://github.com/k8snetworkplumbingwg/multus-cni/issues/1499 Tracking issue: https://github.com/cozystack/cozystack/issues/2310 Co-Authored-By: Claude Signed-off-by: Andrei Kvapil (cherry picked from commit e09cd0f37f7cf399878bcf7c13247a047d4f116f) --- packages/system/multus/templates/multus-daemonset-thick.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/system/multus/templates/multus-daemonset-thick.yml b/packages/system/multus/templates/multus-daemonset-thick.yml index 97144d67b..3839ff614 100644 --- a/packages/system/multus/templates/multus-daemonset-thick.yml +++ b/packages/system/multus/templates/multus-daemonset-thick.yml @@ -119,6 +119,7 @@ data: "cniConfigDir": "/host/etc/cni/net.d", "multusAutoconfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", + "multusMasterCNI": "05-cilium.conflist", "socketDir": "/host/run/multus/" } ---