54 lines
1.2 KiB
HCL
54 lines
1.2 KiB
HCL
data "helm_template" "cilium" {
|
|
name = "cilium"
|
|
namespace = "kube-system"
|
|
repository = "https://helm.cilium.io"
|
|
chart = "cilium"
|
|
version = "1.18.1"
|
|
kube_version = var.kubernetes_version
|
|
set = [
|
|
{
|
|
name = "ipam.mode"
|
|
value = "kubernetes"
|
|
},
|
|
{
|
|
name = "kubeProxyReplacement"
|
|
value = "true"
|
|
},
|
|
{
|
|
name = "securityContext.capabilities.ciliumAgent"
|
|
value = "{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}"
|
|
},
|
|
{
|
|
name = "securityContext.capabilities.cleanCiliumState"
|
|
value = "{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}"
|
|
},
|
|
{
|
|
name = "cgroup.autoMount.enabled"
|
|
value = "false"
|
|
},
|
|
{
|
|
name = "cgroup.hostRoot"
|
|
value = "/sys/fs/cgroup"
|
|
},
|
|
{
|
|
name = "k8sServiceHost"
|
|
value = "localhost"
|
|
},
|
|
{
|
|
name = "k8sServicePort"
|
|
value = "7445"
|
|
},
|
|
{
|
|
name = "gatewayAPI.enabled"
|
|
value = "true"
|
|
},
|
|
{
|
|
name = "gatewayAPI.enableAlpn"
|
|
value = "true"
|
|
},
|
|
{
|
|
name = "gatewayAPI.enableAppProtocol"
|
|
value = "true"
|
|
},
|
|
]
|
|
} |