joe/gitops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add cilium again

Browse Source
This commit is contained in:
Joe Monk
2024-02-19 19:20:23 +00:00
parent 161a6f0fa5
commit 83e4ded87a
6 changed files with 35 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
infra/cilium/announce.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: cilium.io/v2alpha1
kind: CiliumL2AnnouncementPolicy
metadata:
name: default-l2-announcement-policy
namespace: kube-system
spec:
externalIPs: true
loadBalancerIPs: true

8
infra/cilium/ip-pool.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: cilium.io/v2alpha1
kind: CiliumLoadBalancerIPPool
metadata:
name: default-pool
namespace: kube-system
spec:
blocks:
- cidr: 192.168.16.0/20

5
infra/cilium/kustomization.yaml Normal file
View File

@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ip-pool.yaml
- announce.yaml

1
infra/kustomization.yaml
View File

@@ -2,4 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
resources: resources:
- ingress-namespace.yaml - ingress-namespace.yaml
- cilium
- traefik - traefik

1
talos/controlplane.yaml
View File

@@ -83,7 +83,6 @@ cluster:
image: registry.k8s.io/kube-controller-manager:v1.29.1 image: registry.k8s.io/kube-controller-manager:v1.29.1
proxy: proxy:
disabled: true disabled: true
image: registry.k8s.io/kube-proxy:v1.29.1
scheduler: scheduler:
image: registry.k8s.io/kube-scheduler:v1.29.1 image: registry.k8s.io/kube-scheduler:v1.29.1
discovery: discovery:

36
talos/readme.md
View File

@@ -47,29 +47,19 @@ helm install \
cilium/cilium \ cilium/cilium \
--version 1.15.1 \ --version 1.15.1 \
--namespace kube-system \ --namespace kube-system \
--set rollOutCiliumPods=true \ --set=ipam.mode=kubernetes \
--set localRedirectPolicy=true \ --set=kubeProxyReplacement=true \
--set ipam.mode=kubernetes \ --set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \ --set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \ --set=cgroup.autoMount.enabled=false \
--set cgroup.autoMount.enabled=false \ --set=cgroup.hostRoot=/sys/fs/cgroup \
--set cgroup.hostRoot=/sys/fs/cgroup \ --set=k8sServiceHost=localhost \
--set hubble.relay.enabled=true \ --set=k8sServicePort=7445 \
--set hubble.ui.enabled=true \ --set=hubble.relay.enabled=true \
--set kubeProxyReplacement=strict \ --set=hubble.ui.enabled=true \
--set kubeProxyReplacementHealthzBindAddr=0.0.0.0:10256 \ --set=l2announcements.enabled=true \
--set socketLB.enabled=true \ --set=externalIPs.enabled=true \
--set k8sServiceHost=localhost \ --set operator.replicas=1
--set k8sServicePort=7445 \
--set autoDirectNodeRoutes=true \
--set operator.replicas=1 \
--set externalIPs.enabled=true \
--set endpointRoutes.enabled=true \
--set bgp.enabled=false \
--set bgp.announce.loadbalancerIP=true \
--set bgp.announce.podCIDR=false \
--set enableCiliumEndpointSlice=true \
--set l2announcements.enabled=true
``` ```
You can modify this after install with: You can modify this after install with: