Jan Novak
5ca27a832b
- Upgrade Cilium helm release from 1.18.5 to 1.19.1 with gatewayClass creation enabled - Escalate gitea CI service account to cluster-admin, add OIDC cluster-admin binding - Deploy fujarna app with full manifest set (deployment, service, PVC, httproutes, external secret) - Add Flux web UI via flux-operator OCI repository and helm release - Add experiments kustomization with test resources for gateway API and certificates Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
48 lines
1012 B
YAML
48 lines
1012 B
YAML
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: cilium
|
|
namespace: kube-system
|
|
spec:
|
|
chart:
|
|
spec:
|
|
chart: cilium
|
|
reconcileStrategy: ChartVersion
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: cilium
|
|
namespace: flux-system
|
|
version: 1.19.1
|
|
interval: 5m0s
|
|
values:
|
|
cluster:
|
|
name: "home-kube"
|
|
devices: "eth+ bond+ en+"
|
|
hubble:
|
|
relay:
|
|
enabled: true
|
|
ui:
|
|
enabled: true
|
|
ingressController:
|
|
enabled: true
|
|
ipam:
|
|
mode: cluster-pool
|
|
operator:
|
|
clusterPoolIPv4MaskSize: 24
|
|
clusterPoolIPv4PodCIDRList: "10.96.0.0/16"
|
|
l2announcements:
|
|
enabled: true
|
|
gatewayAPI:
|
|
enabled: true
|
|
gatewayClass:
|
|
create: "true"
|
|
kubeProxyReplacement: true
|
|
k8sServiceHost: 192.168.0.31 # or LB IP
|
|
k8sServicePort: 6443
|
|
|
|
# disable envoy daemonset - i guess that is stupid idea anyway
|
|
# envoy:
|
|
# enabled: false
|
|
# l7Proxy: false
|