Skip to content

WIP: hack: only repoint ipv6 kubeconfig when [::1] healthz fails - #1118

Draft
杨成锴 (asjdf) wants to merge 1 commit into
agent-substrate:mainfrom
asjdf:fix/1099-ipv6-kubeconfig-repoint
Draft

WIP: hack: only repoint ipv6 kubeconfig when [::1] healthz fails#1118
杨成锴 (asjdf) wants to merge 1 commit into
agent-substrate:mainfrom
asjdf:fix/1099-ipv6-kubeconfig-repoint

Conversation

@asjdf

Copy link
Copy Markdown

Unconditional localhost rewrite breaks kubectl on Debian-family hosts
where localhost is v4-only. Ask the apiserver instead of guessing.

Fixes agent-substrate#1099.
@google-cla

google-cla Bot commented Aug 21, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.


# For ipv6 kind writes a kubeconfig pointing at [::1], the address it published
# the apiserver on, which only works for a client on the Docker host itself: a
# VM-hosted daemon (Lima on macOS) forwards the port to the *v4* loopback, so

@BenTheElder Benjamin Elder (BenTheElder) Aug 21, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems like a bug we should report to kind upstream. Does lima expose this information in any way?

EDIT: I might argue this is a limactl bug. Seems like it should forward consistently to the macOS host.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

anything we can do?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we might need to follow-up with limactl, I'm not sure how kind can reasonably detect this, limactl should really forward the port on the host with the same IP family?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we inspect the network / containers is there any indication of this there? E.g. docker desktop sets a label IIRC.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I remember I commented somewhere about how should it work, I can not find it now

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

hack: the ipv6 kubeconfig repoint breaks kubectl on a native-Linux Docker host

3 participants