47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: cilium
|
|
namespace: argocd
|
|
spec:
|
|
destination:
|
|
namespace: kube-system
|
|
server: https://kubernetes.default.svc
|
|
project: infra
|
|
source:
|
|
chart: cilium
|
|
repoURL: https://helm.cilium.io/
|
|
targetRevision: 1.14.3
|
|
helm:
|
|
parameters:
|
|
- name: ipam.mode
|
|
value: kubernetes
|
|
- name: kubeProxyReplacement
|
|
value: "true"
|
|
- name: securityContext.capabilities.ciliumAgent
|
|
value: "{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}"
|
|
- name: securityContext.capabilities.cleanCiliumState
|
|
value: "{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}"
|
|
- name: cgroup.autoMount.enabled
|
|
value: "false"
|
|
- name: cgroup.hostRoot
|
|
value: /sys/fs/cgroup
|
|
- name: k8sServiceHost
|
|
value: localhost
|
|
- name: k8sServicePort
|
|
value: "7445"
|
|
- name: l2announcements.enabled
|
|
value: "true"
|
|
- name: k8sClientRateLimit.qps
|
|
value: "30"
|
|
- name: k8sClientRateLimit.burst
|
|
value: "50"
|
|
syncPolicy:
|
|
automated:
|
|
selfHeal: true
|
|
|
|
|
|
|
|
|
|
|