Added Cilium as CNI

This commit is contained in:
Max Pfeiffer
2025-09-16 08:15:45 +02:00
parent c3a4273100
commit a8254f4f5c
6 changed files with 101 additions and 30 deletions

54
proxmox/helm_templates.tf Normal file
View File

@@ -0,0 +1,54 @@
data "helm_template" "cilium" {
name = "cilium"
namespace = "kube-system"
repository = "https://helm.cilium.io"
chart = "cilium"
version = "1.18.1"
kube_version = var.kubernetes_version
set = [
{
name = "ipam.mode"
value = "kubernetes"
},
{
name = "kubeProxyReplacement"
value = "true"
},
{
name = "securityContext.capabilities.ciliumAgent"
value = "{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}"
},
{
name = "securityContext.capabilities.cleanCiliumState"
value = "{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}"
},
{
name = "cgroup.autoMount.enabled"
value = "false"
},
{
name = "cgroup.hostRoot"
value = "/sys/fs/cgroup"
},
{
name = "k8sServiceHost"
value = "localhost"
},
{
name = "k8sServicePort"
value = "7445"
},
{
name = "gatewayAPI.enabled"
value = "true"
},
{
name = "gatewayAPI.enableAlpn"
value = "true"
},
{
name = "gatewayAPI.enableAppProtocol"
value = "true"
},
]
}