Manage cilium with argo plus enable the ARP mode
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
This commit is contained in:
parent
e059d9176a
commit
7c5f1f58e7
|
@ -0,0 +1,46 @@
|
|||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: cilium
|
||||
namespace: argocd
|
||||
spec:
|
||||
destination:
|
||||
namespace: kube-system
|
||||
server: https://kubernetes.default.svc
|
||||
project: infra
|
||||
source:
|
||||
chart: cilium
|
||||
repoURL: https://helm.cilium.io/
|
||||
targetRevision: 1.14.3
|
||||
helm:
|
||||
parameters:
|
||||
- name: ipam.mode
|
||||
value: kubernetes
|
||||
- name: kubeProxyReplacement
|
||||
value: true
|
||||
- name: securityContext.capabilities.ciliumAgent
|
||||
value: {CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}
|
||||
- name: securityContext.capabilities.cleanCiliumState
|
||||
value: {NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}
|
||||
- name: cgroup.autoMount.enabled
|
||||
value: false
|
||||
- name: cgroup.hostRoot
|
||||
value: /sys/fs/cgroup
|
||||
- name: k8sServiceHost
|
||||
value: localhost
|
||||
- name: k8sServicePort
|
||||
value: 7445
|
||||
- name: l2announcements.enabled
|
||||
value: true
|
||||
- name: k8sClientRateLimit.qps
|
||||
value: 30
|
||||
- name: k8sClientRateLimit.burst
|
||||
value: 50
|
||||
syncPolicy:
|
||||
automated:
|
||||
selfHeal: true
|
||||
|
||||
|
||||
|
||||
|
||||
|
Loading…
Reference in New Issue