modified: services/cilium/deploy/app/helm-release.yaml

services/cilium/deploy/app/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
     kubeProxyReplacement: true
     installCRDs: true
     routingMode: native
-    enableIPv4Masquerade: false # using bpf.masquerade: true
+    enableIPv4Masquerade: true # required even if using bpf.masquerade: true
     autoDirectNodeRoutes: true
     bpf:
       masquerade: true