mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
Vegard Hagen
c1b1719e8c
I have a hunch that this somehow interferes with Argo CD. The Argo CD login page shows up in Safari 18.5, Brave 1.80.120 and Firefox 140.0.4. After logging in using Authelia (OIDC), Argo CD starts to display 404 error in Brave and Firefox, but it works in Safari. Clearing site data makes the login page show up in Brave and Firefox again. Signed-off-by: Vegard Hagen <[email protected]>
102 lines
2.0 KiB
YAML
102 lines
2.0 KiB
YAML
# https://github.com/cilium/cilium/blob/main/install/kubernetes/cilium/values.yaml
|
|
cluster:
|
|
name: talos
|
|
id: 1
|
|
|
|
kubeProxyReplacement: true
|
|
|
|
# Talos specific
|
|
k8sServiceHost: localhost
|
|
k8sServicePort: 7445
|
|
securityContext:
|
|
capabilities:
|
|
ciliumAgent: [ CHOWN, KILL, NET_ADMIN, NET_RAW, IPC_LOCK, SYS_ADMIN, SYS_RESOURCE, DAC_OVERRIDE, FOWNER, SETGID, SETUID ]
|
|
cleanCiliumState: [ NET_ADMIN, SYS_ADMIN, SYS_RESOURCE ]
|
|
|
|
cgroup:
|
|
autoMount:
|
|
enabled: false
|
|
hostRoot: /sys/fs/cgroup
|
|
|
|
# https://www.talos.dev/latest/talos-guides/network/host-dns/#forwarding-kube-dns-to-host-dns
|
|
# https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routing
|
|
bpf:
|
|
hostLegacyRouting: true
|
|
|
|
# https://docs.cilium.io/en/stable/network/concepts/ipam/
|
|
ipam:
|
|
mode: kubernetes
|
|
multiPoolPreAllocation: ""
|
|
|
|
operator:
|
|
rollOutPods: true
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
|
|
# Roll out cilium agent pods automatically when ConfigMap is updated.
|
|
rollOutCiliumPods: true
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
|
|
#debug:
|
|
# enabled: true
|
|
|
|
# Increase rate limit when doing L2 announcements
|
|
k8sClientRateLimit:
|
|
qps: 20
|
|
burst: 100
|
|
|
|
l2announcements:
|
|
enabled: true
|
|
|
|
externalIPs:
|
|
enabled: true
|
|
|
|
enableCiliumEndpointSlice: true
|
|
|
|
loadBalancer:
|
|
# https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#maglev-consistent-hashing
|
|
algorithm: maglev
|
|
|
|
gatewayAPI:
|
|
enabled: true
|
|
# enableAlpn: true
|
|
# enableAppProtocol: true
|
|
envoy:
|
|
securityContext:
|
|
capabilities:
|
|
keepCapNetBindService: true
|
|
envoy: [ NET_ADMIN, PERFMON, BPF ]
|
|
|
|
hubble:
|
|
enabled: true
|
|
relay:
|
|
enabled: true
|
|
rollOutPods: true
|
|
ui:
|
|
enabled: true
|
|
rollOutPods: true
|
|
|
|
ingressController: { enabled: false }
|
|
|
|
# mTLS
|
|
authentication:
|
|
enabled: false
|
|
mutual:
|
|
spire:
|
|
enabled: false
|
|
install:
|
|
server:
|
|
dataStorage:
|
|
storageClass: cilium-spire-sc
|