Add IPv6 dual-stack support for syslog-ng Kubernetes services

Co-authored-by: csatib02 <113284287+csatib02@users.noreply.github.com>

Author: Copilot

pkg/resources/syslogng/service.go

@@ -47,9 +47,19 @@ func (r *Reconciler) service() (runtime.Object, reconciler.DesiredState, error)
 		},
 	}
 
+	if r.syslogNGSpec.EnabledIPv6 {
+		ipFamilyPolicy := corev1.IPFamilyPolicyPreferDualStack
+		desired.Spec.IPFamilyPolicy = &ipFamilyPolicy
+		desired.Spec.IPFamilies = []corev1.IPFamily{corev1.IPv4Protocol, corev1.IPv6Protocol}
+	}
+
 	beforeUpdateHook := reconciler.DesiredStateHook(func(current runtime.Object) error {
 		if s, ok := current.(*corev1.Service); ok {
 			desired.Spec.ClusterIP = s.Spec.ClusterIP
+			// Preserve ClusterIPs for dual-stack configuration
+			if len(s.Spec.ClusterIPs) > 0 {
+				desired.Spec.ClusterIPs = s.Spec.ClusterIPs
+			}
 		} else {
 			return errors.Errorf("failed to cast service object %+v", current)
 		}
@@ -61,7 +71,7 @@ func (r *Reconciler) service() (runtime.Object, reconciler.DesiredState, error)
 
 func (r *Reconciler) serviceMetrics() (runtime.Object, reconciler.DesiredState, error) {
 	if r.syslogNGSpec.Metrics != nil && r.syslogNGSpec.Metrics.IsEnabled() {
-		return &corev1.Service{
+		desired := &corev1.Service{
 			ObjectMeta: r.SyslogNGObjectMeta(ServiceName+"-metrics", ComponentSyslogNG),
 			Spec: corev1.ServiceSpec{
 				Ports: []corev1.ServicePort{
@@ -76,7 +86,15 @@ func (r *Reconciler) serviceMetrics() (runtime.Object, reconciler.DesiredState,
 				Type:      corev1.ServiceTypeClusterIP,
 				ClusterIP: corev1.ClusterIPNone,
 			},
-		}, reconciler.StatePresent, nil
+		}
+
+		if r.syslogNGSpec.EnabledIPv6 {
+			ipFamilyPolicy := corev1.IPFamilyPolicyPreferDualStack
+			desired.Spec.IPFamilyPolicy = &ipFamilyPolicy
+			desired.Spec.IPFamilies = []corev1.IPFamily{corev1.IPv4Protocol, corev1.IPv6Protocol}
+		}
+
+		return desired, reconciler.StatePresent, nil
 	}
 	return &corev1.Service{
 		ObjectMeta: r.SyslogNGObjectMeta(ServiceName+"-monitor", ComponentSyslogNG),
@@ -128,7 +146,7 @@ func (r *Reconciler) serviceBufferMetrics() (runtime.Object, reconciler.DesiredS
 			port = r.syslogNGSpec.BufferVolumeMetrics.Port
 		}
 
-		return &corev1.Service{
+		desired := &corev1.Service{
 			ObjectMeta: r.SyslogNGObjectMeta(ServiceName+"-buffer-metrics", ComponentSyslogNG),
 			Spec: corev1.ServiceSpec{
 				Ports: []corev1.ServicePort{
@@ -143,7 +161,15 @@ func (r *Reconciler) serviceBufferMetrics() (runtime.Object, reconciler.DesiredS
 				Type:      corev1.ServiceTypeClusterIP,
 				ClusterIP: corev1.ClusterIPNone,
 			},
-		}, reconciler.StatePresent, nil
+		}
+
+		if r.syslogNGSpec.EnabledIPv6 {
+			ipFamilyPolicy := corev1.IPFamilyPolicyPreferDualStack
+			desired.Spec.IPFamilyPolicy = &ipFamilyPolicy
+			desired.Spec.IPFamilies = []corev1.IPFamily{corev1.IPv4Protocol, corev1.IPv6Protocol}
+		}
+
+		return desired, reconciler.StatePresent, nil
 	}
 	return &corev1.Service{
 		ObjectMeta: r.SyslogNGObjectMeta(ServiceName+"-buffer-monitor", ComponentSyslogNG),
@@ -211,5 +237,12 @@ func (r *Reconciler) headlessService() (runtime.Object, reconciler.DesiredState,
 			ClusterIP: corev1.ClusterIPNone,
 		},
 	}
+
+	if r.syslogNGSpec.EnabledIPv6 {
+		ipFamilyPolicy := corev1.IPFamilyPolicyPreferDualStack
+		desired.Spec.IPFamilyPolicy = &ipFamilyPolicy
+		desired.Spec.IPFamilies = []corev1.IPFamily{corev1.IPv4Protocol, corev1.IPv6Protocol}
+	}
+
 	return desired, reconciler.StatePresent, nil
 }

pkg/sdk/logging/api/v1beta1/syslogng_types.go

@@ -54,6 +54,7 @@ type SyslogNGSpec struct {
 	TLS                                 SyslogNGTLS                  `json:"tls,omitempty"`
 	ReadinessDefaultCheck               ReadinessDefaultCheck        `json:"readinessDefaultCheck,omitempty"`
 	SkipRBACCreate                      bool                         `json:"skipRBACCreate,omitempty"`
+	EnabledIPv6                         bool                         `json:"enabledIPv6,omitempty"`
 	StatefulSetOverrides                *typeoverride.StatefulSet    `json:"statefulSet,omitempty"`
 	ServiceOverrides                    *typeoverride.Service        `json:"service,omitempty"`
 	ServiceAccountOverrides             *typeoverride.ServiceAccount `json:"serviceAccount,omitempty"`