Files
homelab-v/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml
T
renovate[bot]andVegard Hagen 77923604f2 chore(deps): renovate 2025-02-08
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68

chore(deps): update helm release argo-cd to v7.8.2

chore(deps): update helm release argo-cd to v7.8.2

chore(deps): update netbird to v0.36.5

chore(deps): update netbirdio/relay docker tag to v0.36.5

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.1

chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.1

chore(deps): update dependency siderolabs/talos to v1.9.3

chore(deps): update keycloak docker tag to v24.4.9

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68.5.0

chore(deps): update intel device plugins to v0.32.0

chore(deps): update cloudflare/cloudflared docker tag to v2025.2.0

chore(deps): update helm release authelia to v0.9.15

chore(deps): update proxmox-csi-plugin docker tag to v0.3.5

chore(deps): update sealed-secrets docker tag to v2.5.6

chore(deps): update terraform proxmox to v0.70.1

chore(deps): update cilium to v1.17.0

chore(deps): update dependency cert-manager/cert-manager to v1.17.0

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.11.0

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.18.4

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69
2025-02-08 22:08:28 +01:00

86 lines
2.2 KiB
YAML

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: cilium-install
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: cilium-install
namespace: kube-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: cilium-install
namespace: kube-system
---
apiVersion: batch/v1
kind: Job
metadata:
name: cilium-install
namespace: kube-system
spec:
backoffLimit: 10
template:
metadata:
labels:
app: cilium-install
spec:
restartPolicy: OnFailure
tolerations:
- operator: Exists
- effect: NoSchedule
operator: Exists
- effect: NoExecute
operator: Exists
- effect: PreferNoSchedule
operator: Exists
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoExecute
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: PreferNoSchedule
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: node-role.kubernetes.io/control-plane
operator: Exists
serviceAccountName: cilium-install
hostNetwork: true
containers:
- name: cilium-install
image: quay.io/cilium/cilium-cli-ci:latest
env:
- name: KUBERNETES_SERVICE_HOST
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: status.podIP
- name: KUBERNETES_SERVICE_PORT
value: "6443"
volumeMounts:
- name: values
mountPath: /root/app/values.yaml
subPath: values.yaml
command:
- cilium
- install
- --version=v1.17.0 # renovate: github-releases=cilium/cilium
- --set
- kubeProxyReplacement=true
- --values
- values.yaml
volumes:
- name: values
configMap:
name: cilium-values