fix: ansible dir should only exist for k3s and k0s (#1191)

* fix: ansible dir should only exist for k3s and k0s Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: rename partial files Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-18 13:52:11 -05:00
1 parent bae0be1ef0
commit 0c4f0260d5
@@ -0,0 +1,113 @@
+autoDirectNodeRoutes: true
+bpf:
+  masquerade: true
+bgp:
+  enabled: false
+cluster:
+  name: home-cluster
+  id: 1
+containerRuntime:
+  integration: containerd
+  #% if bootstrap_distribution == "k3s" %#
+  socketPath: /var/run/k3s/containerd/containerd.sock
+  #% elif bootstrap_distribution == "k0s" %#
+  socketPath: /var/run/k0s/containerd.sock
+  #% endif %#
+endpointRoutes:
+  enabled: true
+hubble:
+  enabled: true
+  metrics:
+    enabled:
+      - dns:query
+      - drop
+      - tcp
+      - flow
+      - port-distribution
+      - icmp
+      - http
+    serviceMonitor:
+      enabled: true
+    dashboards:
+      enabled: true
+      annotations:
+        grafana_folder: Cilium
+  relay:
+    enabled: true
+    rollOutPods: true
+    prometheus:
+      serviceMonitor:
+        enabled: true
+  ui:
+    enabled: true
+    rollOutPods: true
+    ingress:
+      enabled: true
+      className: internal
+      #% if homepage.enabled | default(false) %#
+      annotations:
+        gethomepage.dev/enabled: "true"
+        gethomepage.dev/group: Network
+        gethomepage.dev/name: Cilium
+        gethomepage.dev/icon: cilium.png
+      #% endif %#
+      hosts:
+        - "hubble.${SECRET_DOMAIN}"
+      tls:
+        - hosts:
+            - "hubble.${SECRET_DOMAIN}"
+ipam:
+  mode: kubernetes
+ipv4NativeRoutingCIDR: "${CLUSTER_CIDR}"
+#% if bootstrap_ipv6_enabled | default(false) %#
+ipv6NativeRoutingCIDR: "${CLUSTER_CIDR_V6}"
+ipv6:
+  enabled: true
+#% endif %#
+#% if bootstrap_distribution == "k3s" %#
+k8sServiceHost: 127.0.0.1
+k8sServicePort: 6444
+#% elif bootstrap_distribution == "k0s"  %#
+k8sServiceHost: localhost
+k8sServicePort: 7443
+#% endif %#
+kubeProxyReplacement: true
+kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
+l2announcements:
+  #% if bootstrap_ipv6_enabled | default(false) %#
+  enabled: false
+  #% else %#
+  enabled: true
+  # https://github.com/cilium/cilium/issues/26586
+  leaseDuration: 120s
+  leaseRenewDeadline: 60s
+  leaseRetryPeriod: 1s
+  #% endif %#
+loadBalancer:
+  algorithm: maglev
+  mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
+localRedirectPolicy: true
+operator:
+  replicas: 1
+  rollOutPods: true
+  prometheus:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+  dashboards:
+    enabled: true
+    annotations:
+      grafana_folder: Cilium
+prometheus:
+  enabled: true
+  serviceMonitor:
+    enabled: true
+    trustCRDsExist: true
+dashboards:
+  enabled: true
+  annotations:
+    grafana_folder: Cilium
+rollOutCiliumPods: true
+routingMode: native
+securityContext:
+  privileged: true