joe/gitops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add cilium again

Browse Source
This commit is contained in:
Joe Monk
2024-02-19 19:20:23 +00:00
parent 161a6f0fa5
commit 83e4ded87a
6 changed files with 35 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
talos/controlplane.yaml
View File

@@ -83,7 +83,6 @@ cluster:
image: registry.k8s.io/kube-controller-manager:v1.29.1
proxy:
disabled: true
image: registry.k8s.io/kube-proxy:v1.29.1
scheduler:
image: registry.k8s.io/kube-scheduler:v1.29.1
discovery:

36
talos/readme.md
View File

@@ -47,29 +47,19 @@ helm install \
cilium/cilium \
--version 1.15.1 \
--namespace kube-system \
--set rollOutCiliumPods=true \
--set localRedirectPolicy=true \
--set ipam.mode=kubernetes \
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
--set cgroup.autoMount.enabled=false \
--set cgroup.hostRoot=/sys/fs/cgroup \
--set hubble.relay.enabled=true \
--set hubble.ui.enabled=true \
--set kubeProxyReplacement=strict \
--set kubeProxyReplacementHealthzBindAddr=0.0.0.0:10256 \
--set socketLB.enabled=true \
--set k8sServiceHost=localhost \
--set k8sServicePort=7445 \
--set autoDirectNodeRoutes=true \
--set operator.replicas=1 \
--set externalIPs.enabled=true \
--set endpointRoutes.enabled=true \
--set bgp.enabled=false \
--set bgp.announce.loadbalancerIP=true \
--set bgp.announce.podCIDR=false \
--set enableCiliumEndpointSlice=true \
--set l2announcements.enabled=true
--set=ipam.mode=kubernetes \
--set=kubeProxyReplacement=true \
--set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
--set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
--set=cgroup.autoMount.enabled=false \
--set=cgroup.hostRoot=/sys/fs/cgroup \
--set=k8sServiceHost=localhost \
--set=k8sServicePort=7445 \
--set=hubble.relay.enabled=true \
--set=hubble.ui.enabled=true \
--set=l2announcements.enabled=true \
--set=externalIPs.enabled=true \
--set operator.replicas=1
```
You can modify this after install with: