redaction (#1)
Add the redacted source file for demo purposes Reviewed-on: https://source.michaeldileo.org/michael_dileo/Keybard-Vagabond-Demo/pulls/1 Co-authored-by: Michael DiLeo <michael_dileo@proton.me> Co-committed-by: Michael DiLeo <michael_dileo@proton.me>
This commit was merged in pull request #1.
This commit is contained in:
6
manifests/infrastructure/cilium/kustomization.yaml
Normal file
6
manifests/infrastructure/cilium/kustomization.yaml
Normal file
@@ -0,0 +1,6 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- repository.yaml
|
||||
- release.yaml
|
||||
63
manifests/infrastructure/cilium/release.yaml
Normal file
63
manifests/infrastructure/cilium/release.yaml
Normal file
@@ -0,0 +1,63 @@
|
||||
# manifests/infrastructure/cilium/release.yaml
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: cilium
|
||||
namespace: kube-system
|
||||
spec:
|
||||
interval: 5m
|
||||
chart:
|
||||
spec:
|
||||
chart: cilium
|
||||
version: "1.18.3"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: cilium
|
||||
namespace: kube-system
|
||||
interval: 1m
|
||||
values:
|
||||
operator:
|
||||
replicas: 2
|
||||
ipam:
|
||||
mode: kubernetes
|
||||
# Explicitly use VLAN interface for inter-node communication
|
||||
devices: "enp9s0"
|
||||
nodePort:
|
||||
enabled: true
|
||||
hostFirewall:
|
||||
enabled: true
|
||||
hubble:
|
||||
relay:
|
||||
enabled: true
|
||||
ui:
|
||||
enabled: true
|
||||
peerService:
|
||||
clusterDomain: cluster.local
|
||||
etcd:
|
||||
clusterDomain: cluster.local
|
||||
kubeProxyReplacement: true
|
||||
securityContext:
|
||||
capabilities:
|
||||
ciliumAgent:
|
||||
- CHOWN
|
||||
- KILL
|
||||
- NET_ADMIN
|
||||
- NET_RAW
|
||||
- IPC_LOCK
|
||||
- SYS_ADMIN
|
||||
- SYS_RESOURCE
|
||||
- DAC_OVERRIDE
|
||||
- FOWNER
|
||||
- SETGID
|
||||
- SETUID
|
||||
cleanCiliumState:
|
||||
- NET_ADMIN
|
||||
- SYS_ADMIN
|
||||
- SYS_RESOURCE
|
||||
cgroup:
|
||||
autoMount:
|
||||
enabled: true
|
||||
hostRoot: /sys/fs/cgroup
|
||||
k8sServiceHost: api.keyboardvagabond.com
|
||||
k8sServicePort: "6443"
|
||||
9
manifests/infrastructure/cilium/repository.yaml
Normal file
9
manifests/infrastructure/cilium/repository.yaml
Normal file
@@ -0,0 +1,9 @@
|
||||
---
|
||||
apiVersion: source.toolkit.fluxcd.io/v1
|
||||
kind: HelmRepository
|
||||
metadata:
|
||||
name: cilium
|
||||
namespace: kube-system
|
||||
spec:
|
||||
interval: 5m0s
|
||||
url: https://helm.cilium.io/
|
||||
Reference in New Issue
Block a user