mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
Vegard Hagen
3b812ed476
I'm experiencing issues reaching services directly exposed to the internet At first only some carriers didn't load the pages, but it appears to be getting worse somehow Signed-off-by: Vegard Hagen <[email protected]>
157 lines
3.0 KiB
YAML
157 lines
3.0 KiB
YAML
# https://github.com/cilium/cilium/blob/main/install/kubernetes/cilium/values.yaml
|
|
cluster:
|
|
name: talos
|
|
id: 1
|
|
|
|
kubeProxyReplacement: true
|
|
|
|
# Talos specific
|
|
k8sServiceHost: localhost
|
|
k8sServicePort: 7445
|
|
securityContext:
|
|
capabilities:
|
|
ciliumAgent: [ CHOWN, KILL, NET_ADMIN, NET_RAW, IPC_LOCK, SYS_ADMIN, SYS_RESOURCE, DAC_OVERRIDE, FOWNER, SETGID, SETUID ]
|
|
cleanCiliumState: [ NET_ADMIN, SYS_ADMIN, SYS_RESOURCE ]
|
|
|
|
cgroup:
|
|
autoMount:
|
|
enabled: false
|
|
hostRoot: /sys/fs/cgroup
|
|
|
|
# https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routing
|
|
bpf:
|
|
masquerade: true
|
|
|
|
# https://docs.cilium.io/en/stable/network/concepts/ipam/
|
|
ipam:
|
|
mode: kubernetes
|
|
multiPoolPreAllocation: ""
|
|
|
|
operator:
|
|
rollOutPods: true
|
|
prometheus:
|
|
metricsService: true
|
|
enabled: true
|
|
port: 9963
|
|
serviceMonitor:
|
|
enabled: true
|
|
dashboards:
|
|
enabled: true
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
|
|
# Roll out cilium agent pods automatically when ConfigMap is updated.
|
|
rollOutCiliumPods: true
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
|
|
#debug:
|
|
# enabled: true
|
|
|
|
k8sClientRateLimit:
|
|
qps: 20
|
|
burst: 100
|
|
|
|
l2announcements:
|
|
enabled: true
|
|
|
|
# https://docs.cilium.io/en/latest/network/bgp-control-plane/bgp-control-plane-v2/
|
|
bgpControlPlane:
|
|
enabled: true
|
|
secretsNamespace:
|
|
name: cilium-secrets
|
|
|
|
externalIPs:
|
|
enabled: true
|
|
|
|
loadBalancer:
|
|
# https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#maglev-consistent-hashing
|
|
algorithm: maglev
|
|
|
|
gatewayAPI:
|
|
enabled: true
|
|
enableAlpn: true
|
|
# enableAppProtocol: true
|
|
|
|
envoy:
|
|
prometheus:
|
|
enabled: true
|
|
port: "9964"
|
|
serviceMonitor:
|
|
enabled: true
|
|
securityContext:
|
|
capabilities:
|
|
keepCapNetBindService: true
|
|
envoy: [ NET_ADMIN, PERFMON, BPF ]
|
|
|
|
hubble:
|
|
enabled: true
|
|
metrics:
|
|
enabled:
|
|
- dns
|
|
- drop
|
|
- tcp
|
|
- flow
|
|
- port-distribution
|
|
- icmp
|
|
- "httpV2:exemplars=true;labelsContext=source_ip,source_namespace,source_workload,destination_ip,destination_namespace,destination_workload,traffic_direction;sourceContext=workload-name|reserved-identity;destinationContext=workload-name|reserved-identity"
|
|
enableOpenMetrics: true
|
|
port: 9965
|
|
serviceMonitor:
|
|
enabled: true
|
|
dashboards:
|
|
enabled: true
|
|
relay:
|
|
enabled: true
|
|
rollOutPods: true
|
|
prometheus:
|
|
enabled: true
|
|
port: 9966
|
|
serviceMonitor:
|
|
enabled: true
|
|
ui:
|
|
enabled: true
|
|
rollOutPods: true
|
|
|
|
ingressController: { enabled: false }
|
|
|
|
clustermesh:
|
|
apiserver:
|
|
metrics:
|
|
enabled: true
|
|
port: 9962
|
|
serviceMonitor:
|
|
enabled: true
|
|
|
|
# mTLS
|
|
authentication:
|
|
enabled: false
|
|
mutual:
|
|
spire:
|
|
enabled: false
|
|
install:
|
|
server:
|
|
dataStorage:
|
|
storageClass: cilium-spire-sc
|
|
|
|
prometheus:
|
|
metricsService: true
|
|
enabled: true
|
|
port: 9962
|
|
serviceMonitor:
|
|
enabled: true
|
|
trustCRDsExist: true
|
|
|
|
dashboards:
|
|
enabled: true
|