Pod and Service Subnet Configuration

How to Configure Service and Pod Subnets#

You can set the CIDR for the Pods subnet and Services subnet under spec.clusterNetwork:

yaml

		clusterNetwork:
  services:
    cidrBlocks: ["10.128.0.0/12"]
  pods:
    cidrBlocks: ["192.168.0.0/16"]

The cidrBlocks parameters expect an array of strings in IPv4 CIDR notation. The subnets can't have conflicting addresses and must be in the Private IPv4 ranges⁠ described by RFC 1918.

Note

The CIDR blocks cannot be changed in running clusters, only at creation time.

You can also configure the domain for your services in the spec.clusterNetwork section:

yaml

		clusterNetwork:
  serviceDomain: "cluster.local"

Configuring Egress Gateway with Static Node IP

Learn how to route pod egress traffic through a specific Kubernetes node with a static public IP using Cilium Egress Gateway on Syself Autopilot.

mTLS and Service Meshes

Learn how service meshes and mutual TLS (mTLS) can provide encryption, service identity, and Zero Trust networking for Kubernetes workloads.