mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
Vegard Stenhjem HagenandGitHub
1deb5aced1
Also use said devcontainer i GitHub workflows to validate config. * feat(devcontainer): build devcontainer Signed-off-by: Vegard Hagen <[email protected]> * feat(ci): validate tofu files on push Signed-off-by: Vegard Hagen <[email protected]> * feat(devcontainer): simplify devcontainer Signed-off-by: Vegard Hagen <[email protected]> * fix(devcontainer): don't cache package index This will reduce the final image size. Signed-off-by: Vegard Hagen <[email protected]> * feat(devcontainer): switch to ubuntu and use devcontainer features as much as possible Signed-off-by: Vegard Hagen <[email protected]> --------- Signed-off-by: Vegard Hagen <[email protected]>
106 lines
2.0 KiB
YAML
106 lines
2.0 KiB
YAML
# https://github.com/cilium/cilium/blob/main/install/kubernetes/cilium/values.yaml
|
|
cluster:
|
|
name: talos
|
|
id: 1
|
|
|
|
kubeProxyReplacement: true
|
|
|
|
# Talos specific
|
|
k8sServiceHost: localhost
|
|
k8sServicePort: 7445
|
|
securityContext:
|
|
capabilities:
|
|
ciliumAgent: [ CHOWN, KILL, NET_ADMIN, NET_RAW, IPC_LOCK, SYS_ADMIN, SYS_RESOURCE, DAC_OVERRIDE, FOWNER, SETGID, SETUID ]
|
|
cleanCiliumState: [ NET_ADMIN, SYS_ADMIN, SYS_RESOURCE ]
|
|
|
|
cgroup:
|
|
autoMount:
|
|
enabled: false
|
|
hostRoot: /sys/fs/cgroup
|
|
|
|
# https://www.talos.dev/latest/talos-guides/network/host-dns/#forwarding-kube-dns-to-host-dns
|
|
# https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routing
|
|
bpf:
|
|
hostLegacyRouting: true
|
|
|
|
# https://docs.cilium.io/en/stable/network/concepts/ipam/
|
|
ipam:
|
|
mode: kubernetes
|
|
multiPoolPreAllocation: ""
|
|
|
|
operator:
|
|
rollOutPods: true
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
|
|
# Roll out cilium agent pods automatically when ConfigMap is updated.
|
|
rollOutCiliumPods: true
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
|
|
#debug:
|
|
# enabled: true
|
|
|
|
# Increase rate limit when doing L2 announcements
|
|
k8sClientRateLimit:
|
|
qps: 20
|
|
burst: 100
|
|
|
|
l2announcements:
|
|
enabled: true
|
|
|
|
externalIPs:
|
|
enabled: true
|
|
|
|
enableCiliumEndpointSlice: true
|
|
|
|
loadBalancer:
|
|
# https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#maglev-consistent-hashing
|
|
algorithm: maglev
|
|
|
|
gatewayAPI:
|
|
enabled: true
|
|
envoy:
|
|
securityContext:
|
|
capabilities:
|
|
keepCapNetBindService: true
|
|
envoy: [ NET_ADMIN, PERFMON, BPF ]
|
|
|
|
hubble:
|
|
enabled: true
|
|
relay:
|
|
enabled: true
|
|
rollOutPods: true
|
|
ui:
|
|
enabled: true
|
|
rollOutPods: true
|
|
|
|
ingressController:
|
|
enabled: false
|
|
default: true
|
|
loadbalancerMode: shared
|
|
service:
|
|
annotations:
|
|
io.cilium/lb-ipam-ips: 192.168.1.223
|
|
|
|
# mTLS
|
|
authentication:
|
|
enabled: false
|
|
mutual:
|
|
spire:
|
|
enabled: false
|
|
install:
|
|
server:
|
|
dataStorage:
|
|
storageClass: cilium-spire-sc
|