kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
1
---
2
# yaml-language-server: $schema=https://k8s-schemas.home-operations.com/helm.toolkit.fluxcd.io/helmrelease_v2.json
3
apiVersion: helm.toolkit.fluxcd.io/v2
4
kind: HelmRelease
5
metadata:
6
name: cilium
7
spec:
8
chartRef:
9
kind: OCIRepository
10
name: cilium
11
interval: 1h
12
values:
13
autoDirectNodeRoutes: true
14
bandwidthManager:
15
enabled: true
16
bbr: true
17
bpf:
18
datapathMode: netkit
19
masquerade: true
20
preallocateMaps: true
21
bpfClockProbe: true
22
cgroup:
23
automount:
24
enabled: false
25
hostRoot: /sys/fs/cgroup
26
cni:
27
exclusive: false
28
dashboards:
29
enabled: true
30
enableIPv4BIGTCP: true
31
endpointRoutes:
32
enabled: true
33
envoy:
34
enabled: false
35
hubble:
36
enabled: false
37
ipam:
38
mode: kubernetes
39
ipv4NativeRoutingCIDR: 10.42.0.0/16
40
k8sServiceHost: 127.0.0.1
41
k8sServicePort: 7445
42
kubeProxyReplacement: true
43
kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
44
l2announcements:
45
enabled: true
46
loadBalancer:
47
algorithm: maglev
48
mode: dsr
49
localRedirectPolicies:
50
enabled: true
51
operator:
52
dashboards:
53
enabled: true
54
prometheus:
55
enabled: true
56
serviceMonitor:
57
enabled: true
58
replicas: 2
59
resources:
60
limits:
61
memory: 320Mi
62
requests:
63
cpu: 10m
64
memory: 256Mi
65
rollOutPods: true
66
pmtuDiscovery:
67
enabled: true
68
prometheus:
69
enabled: true
70
serviceMonitor:
71
enabled: true
72
trustCRDsExist: true
73
resources:
74
limits:
75
memory: 768Mi
76
requests:
77
cpu: 150m
78
memory: 512Mi
79
rollOutCiliumPods: true
80
routingMode: native
81
securityContext:
82
capabilities:
83
ciliumAgent:
84
- CHOWN
85
- KILL
86
- NET_ADMIN
87
- NET_RAW
88
- IPC_LOCK
89
- SYS_ADMIN
90
- SYS_RESOURCE
91
- PERFMON
92
- BPF
93
- DAC_OVERRIDE
94
- FOWNER
95
- SETGID
96
- SETUID
97
cleanCiliumState:
98
- NET_ADMIN
99
- SYS_ADMIN
100
- SYS_RESOURCE
101
socketLB:
102
enabled: true
103
hostNamespaceOnly: true