infra4talos/everything-app/app-cilium.yaml
2025-06-30 19:25:06 +00:00

36 lines
1.1 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: cilium
namespace: argocd
spec:
destination:
namespace: kube-system
server: https://kubernetes.default.svc
project: infra
source:
chart: cilium
repoURL: https://helm.cilium.io/
targetRevision: 1.14.3
helm:
parameters:
- name: ipam.mode
value: kubernetes
- name: kubeProxyReplacement
value: 'true'
- name: securityContext.capabilities.ciliumAgent
value: '{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}'
- name: securityContext.capabilities.cleanCiliumState
value: '{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}'
- name: cgroup.autoMount.enabled
value: 'false'
- name: cgroup.hostRoot
value: /sys/fs/cgroup
- name: k8sServiceHost
value: localhost
- name: k8sServicePort
value: '7445'
- name: k8sClientRateLimit.qps
value: '50'
- name: k8sClientRateLimit.burst
value: '100'