47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
|
apiVersion: argoproj.io/v1alpha1
|
||
|
|
kind: Application
|
||
|
|
metadata:
|
||
|
|
name: cilium
|
||
|
|
namespace: argocd
|
||
|
|
spec:
|
||
|
|
destination:
|
||
|
|
namespace: kube-system
|
||
|
|
server: https://kubernetes.default.svc
|
||
|
|
project: infra
|
||
|
|
source:
|
||
|
|
chart: cilium
|
||
|
|
repoURL: https://helm.cilium.io/
|
||
|
|
targetRevision: 1.14.3
|
||
|
|
helm:
|
||
|
|
parameters:
|
||
|
|
- name: ipam.mode
|
||
|
|
value: kubernetes
|
||
|
|
- name: kubeProxyReplacement
|
||
|
|
value: true
|
||
|
|
- name: securityContext.capabilities.ciliumAgent
|
||
|
|
value: {CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}
|
||
|
|
- name: securityContext.capabilities.cleanCiliumState
|
||
|
|
value: {NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}
|
||
|
|
- name: cgroup.autoMount.enabled
|
||
|
|
value: false
|
||
|
|
- name: cgroup.hostRoot
|
||
|
|
value: /sys/fs/cgroup
|
||
|
|
- name: k8sServiceHost
|
||
|
|
value: localhost
|
||
|
|
- name: k8sServicePort
|
||
|
|
value: 7445
|
||
|
|
- name: l2announcements.enabled
|
||
|
|
value: true
|
||
|
|
- name: k8sClientRateLimit.qps
|
||
|
|
value: 30
|
||
|
|
- name: k8sClientRateLimit.burst
|
||
|
|
value: 50
|
||
|
|
syncPolicy:
|
||
|
|
automated:
|
||
|
|
selfHeal: true
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|