grachevko
3d5f56f099
E2E / reject-invalid (bad-vlan-tag) (push) Skipped
E2E / reject-invalid (missing-schematic) (push) Skipped
E2E / reject-invalid (nested-cidr-overlap) (push) Skipped
E2E / reject-invalid (node-uses-gateway-addr) (push) Skipped
E2E / reject-invalid (overlapping-cidrs) (push) Skipped
E2E / reject-invalid (partial-bgp) (push) Skipped
E2E / reject-invalid (reserved-node-name) (push) Skipped
E2E / reject-invalid (bad-bgp-asn) (push) Skipped
E2E / reject-invalid (bad-mac-address) (push) Skipped
E2E / reject-invalid (bad-repo-url) (push) Skipped
E2E / reject-invalid (duplicate-gateway-addrs) (push) Skipped
E2E / reject-invalid (duplicate-node-names) (push) Skipped
E2E / reject-invalid (gateway-node-collision) (push) Skipped
E2E / reject-invalid (missing-dns-token) (push) Skipped
E2E / reject-invalid (missing-external-gateway) (push) Skipped
E2E / reject-invalid (missing-known-hosts) (push) Skipped
E2E / reject-invalid (node-addr-outside-cidr) (push) Skipped
E2E / reject-invalid (non-canonical-cidr) (push) Skipped
E2E / reject-invalid (tiny-svc-cidr) (push) Skipped
E2E / reject-invalid (tunnel-without-dns) (push) Skipped
E2E / accept-valid (internal) (push) Skipped
E2E / accept-valid (multi-controller) (push) Skipped
E2E / validator-tests (push) Skipped
E2E / accept-valid (no-webhook) (push) Skipped
E2E / accept-valid (private) (push) Skipped
E2E / accept-valid (public) (push) Skipped
E2E / accept-valid (single-node) (push) Skipped
E2E / accept-valid (direct) (push) Skipped
E2E / accept-valid (selfhosted) (push) Skipped
88 lines
1.9 KiB
YAML
88 lines
1.9 KiB
YAML
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: cilium
|
|
spec:
|
|
chartRef:
|
|
kind: OCIRepository
|
|
name: cilium
|
|
interval: 1h
|
|
values:
|
|
autoDirectNodeRoutes: true
|
|
bpf:
|
|
masquerade: true
|
|
# Ref: https://github.com/siderolabs/talos/issues/10002
|
|
hostLegacyRouting: true
|
|
cni:
|
|
# Required for pairing with Multus CNI
|
|
exclusive: false
|
|
cgroup:
|
|
automount:
|
|
enabled: false
|
|
hostRoot: /sys/fs/cgroup
|
|
# The stable bond name is defined in talos/all/20-network-links.yaml.tpl
|
|
devices: bond0+
|
|
dashboards:
|
|
enabled: true
|
|
endpointRoutes:
|
|
enabled: true
|
|
envoy:
|
|
enabled: false
|
|
gatewayAPI:
|
|
enabled: false
|
|
hubble:
|
|
enabled: false
|
|
ipam:
|
|
mode: kubernetes
|
|
ipv4NativeRoutingCIDR: "10.42.0.0/16"
|
|
k8sServiceHost: 127.0.0.1
|
|
k8sServicePort: 7445
|
|
kubeProxyReplacement: true
|
|
kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
|
|
l2announcements:
|
|
enabled: true
|
|
loadBalancer:
|
|
algorithm: maglev
|
|
mode: "snat"
|
|
localRedirectPolicies:
|
|
enabled: true
|
|
operator:
|
|
dashboards:
|
|
enabled: true
|
|
prometheus:
|
|
enabled: true
|
|
serviceMonitor:
|
|
enabled: true
|
|
replicas: 2
|
|
rollOutPods: true
|
|
prometheus:
|
|
enabled: true
|
|
serviceMonitor:
|
|
enabled: true
|
|
trustCRDsExist: true
|
|
rollOutCiliumPods: true
|
|
routingMode: native
|
|
securityContext:
|
|
capabilities:
|
|
ciliumAgent:
|
|
- CHOWN
|
|
- KILL
|
|
- NET_ADMIN
|
|
- NET_RAW
|
|
- IPC_LOCK
|
|
- SYS_ADMIN
|
|
- SYS_RESOURCE
|
|
- PERFMON
|
|
- BPF
|
|
- DAC_OVERRIDE
|
|
- FOWNER
|
|
- SETGID
|
|
- SETUID
|
|
cleanCiliumState:
|
|
- NET_ADMIN
|
|
- SYS_ADMIN
|
|
- SYS_RESOURCE
|
|
socketLB:
|
|
enabled: true
|