Add documentation for flex cidr provider controller#543
Merged
Conversation
oracle-contributor-agreement
Bot
added
the
OCA Verified
GouthamML
reviewed
Jul 9, 2026
| @@ -0,0 +1,204 @@ | |||
| # Flex CIDR Provider Controller | |||
|
|
|||
| The OCI Cloud Controller Manager (OCI CCM) Flex CIDR Provider Controller enables self-managed Kubernetes clusters running on Oracle Cloud Infrastructure (OCI) to allocate and advertise a VCN-native IP CIDR block that pods can use on a node. This enables using third part CNIs like Cilium to be used in native (direct routing) mode. | |||
Member
There was a problem hiding this comment.
nit:
a VCN-native IP CIDR block (a.k.a IP CIDR Address)
Suggested change
| The OCI Cloud Controller Manager (OCI CCM) Flex CIDR Provider Controller enables self-managed Kubernetes clusters running on Oracle Cloud Infrastructure (OCI) to allocate and advertise a VCN-native IP CIDR block that pods can use on a node. This enables using third part CNIs like Cilium to be used in native (direct routing) mode. | |
| The OCI Cloud Controller Manager (OCI CCM) Flex CIDR Provider Controller enables self-managed Kubernetes clusters running on Oracle Cloud Infrastructure (OCI) to allocate and advertise a VCN-native IP CIDR block (a.k.a IP CIDR Address) that pods can use on a node. This enables using third part CNIs like Cilium to be used in native (direct routing) mode. |
reference: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/managingIPaddresses.htm
GouthamML
reviewed
Jul 9, 2026
| - ip-count: number of IPs needed for pods on a node. | ||
| - cidr-blocks: [optional] user-specified parent CIDRs to carve pod CIDRs from. | ||
|
|
||
| The OKE FlexCIDR Provider expects these values to be stored as metadata on each worker node instance. It fetches this metadata via the OCI Instance Metadata Service (IMDS) and calculates the correct IPv4 CIDR blocks (and IPv6 prefixes) to allocate for that node’s primary VNIC. Use the OCI CLI to configure this metadata: |
Member
There was a problem hiding this comment.
The OKE FlexCIDR Provider expects these values to be stored as metadata on each worker
please highlight if the customer can achieve this by using custom cloud init
Contributor
Author
There was a problem hiding this comment.
This has to be done in instance configuration or at the time of compute launch.
GouthamML
reviewed
Jul 9, 2026
|
|
||
| Verify: | ||
|
|
||
| - `flexcidr-primary-vnic` metadata exists. |
Member
There was a problem hiding this comment.
nit:
a sample oci clli get instance command with jq filter on the metadata - a quick pick for user to verify
GouthamML
approved these changes
Jul 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Captures the setups to enable the flex cidr provider controller to allocate CIDR blocks for using VCN native IPs for pods. Currently tested with cilium CNI.