feat: add partial support, change k0s config filename, always use NLLB for k0s (#1180)

* feat: add partial support, change k0s config filename, always use NLLB for k0s Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update wording Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-18 08:38:03 -05:00
1 parent 13a005d23d
commit d46e7f9663
@@ -14,52 +14,7 @@ spec:
  targetNamespace: kube-system
  bootstrap: true
  valuesContent: |-
-    autoDirectNodeRoutes: true
-    bpf:
-      masquerade: true
-    bgp:
-      enabled: false
-    cluster:
-      name: home-cluster
-      id: 1
-    containerRuntime:
-      integration: containerd
-      socketPath: /var/run/k3s/containerd/containerd.sock
-    endpointRoutes:
-      enabled: true
-    hubble:
-      enabled: false
-    ipam:
-      mode: kubernetes
-    ipv4NativeRoutingCIDR: "{{ cluster_cidr }}"
-    #% if bootstrap_ipv6_enabled | default(false) %#
-    ipv6NativeRoutingCIDR: "{{ cluster_cidr_v6 }}"
-    ipv6:
-      enabled: true
-    #% endif %#
-    k8sServiceHost: 127.0.0.1
-    k8sServicePort: 6444
-    kubeProxyReplacement: true
-    kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
-    l2announcements:
-      #% if bootstrap_ipv6_enabled | default(false) %#
-      enabled: false
-      #% else %#
-      enabled: true
-      # https://github.com/cilium/cilium/issues/26586
-      leaseDuration: 120s
-      leaseRenewDeadline: 60s
-      leaseRetryPeriod: 1s
-      #% endif %#
-    loadBalancer:
-      algorithm: maglev
-      mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
-    localRedirectPolicy: true
-    operator:
-      replicas: 1
-      rollOutPods: true
-    rollOutCiliumPods: true
-    routingMode: native
-    securityContext:
-      privileged: true
+    #% filter indent(width=4, first=True) %#
+    #% include 'partials/cilium-values-init.yaml.partial' %#
+    #% endfilter %#
 #% endif %#
@@ -24,116 +24,6 @@ spec:
  uninstall:
    keepHistory: false
  values:
-    autoDirectNodeRoutes: true
-    bpf:
-      masquerade: true
-    bgp:
-      enabled: false
-    cluster:
-      name: home-cluster
-      id: 1
-    containerRuntime:
-      integration: containerd
-      #% if bootstrap_distribution == "k3s" %#
-      socketPath: /var/run/k3s/containerd/containerd.sock
-      #% elif bootstrap_distribution == "k0s" %#
-      socketPath: /var/run/k0s/containerd.sock
-      #% endif %#
-    endpointRoutes:
-      enabled: true
-    hubble:
-      enabled: true
-      metrics:
-        enabled:
-          - dns:query
-          - drop
-          - tcp
-          - flow
-          - port-distribution
-          - icmp
-          - http
-        serviceMonitor:
-          enabled: true
-        dashboards:
-          enabled: true
-          annotations:
-            grafana_folder: Cilium
-      relay:
-        enabled: true
-        rollOutPods: true
-        prometheus:
-          serviceMonitor:
-            enabled: true
-      ui:
-        enabled: true
-        rollOutPods: true
-        ingress:
-          enabled: true
-          className: internal
-          #% if homepage.enabled | default(false) %#
-          annotations:
-            gethomepage.dev/enabled: "true"
-            gethomepage.dev/group: Network
-            gethomepage.dev/name: Cilium
-            gethomepage.dev/icon: cilium.png
-          #% endif %#
-          hosts:
-            - "hubble.${SECRET_DOMAIN}"
-          tls:
-            - hosts:
-                - "hubble.${SECRET_DOMAIN}"
-    ipam:
-      mode: kubernetes
-    ipv4NativeRoutingCIDR: "${CLUSTER_CIDR}"
-    #% if bootstrap_ipv6_enabled | default(false) %#
-    ipv6NativeRoutingCIDR: "${CLUSTER_CIDR_V6}"
-    ipv6:
-      enabled: true
-    #% endif %#
-    #% if bootstrap_distribution == "k3s" %#
-    k8sServiceHost: 127.0.0.1
-    k8sServicePort: 6444
-    #% else %#
-    k8sServiceHost: "${KUBE_API_ADDR}"
-    k8sServicePort: 6443
-    #% endif %#
-    kubeProxyReplacement: true
-    kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
-    l2announcements:
-      #% if bootstrap_ipv6_enabled | default(false) %#
-      enabled: false
-      #% else %#
-      enabled: true
-      # https://github.com/cilium/cilium/issues/26586
-      leaseDuration: 120s
-      leaseRenewDeadline: 60s
-      leaseRetryPeriod: 1s
-      #% endif %#
-    loadBalancer:
-      algorithm: maglev
-      mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
-    localRedirectPolicy: true
-    operator:
-      replicas: 1
-      rollOutPods: true
-      prometheus:
-        enabled: true
-        serviceMonitor:
-          enabled: true
-      dashboards:
-        enabled: true
-        annotations:
-          grafana_folder: Cilium
-    prometheus:
-      enabled: true
-      serviceMonitor:
-        enabled: true
-        trustCRDsExist: true
-    dashboards:
-      enabled: true
-      annotations:
-        grafana_folder: Cilium
-    rollOutCiliumPods: true
-    routingMode: native
-    securityContext:
-      privileged: true
+    #% filter indent(width=4, first=True) %#
+    #% include 'partials/cilium-values-full.yaml.partial' %#
+    #% endfilter %#
@@ -86,14 +86,12 @@ spec:
            #% endif %#
            #% endfor %#
        network:
+          provider: custom
          kubeProxy:
            disabled: true
-          #%  if bootstrap_nodes.master | length > 1 %#
          nodeLocalLoadBalancing:
            enabled: true
            type: EnvoyProxy
-          #% endif %#
-          provider: custom
        extensions:
          helm:
            repositories:
@@ -106,56 +104,7 @@ spec:
                version: "1.14.5"
                namespace: kube-system
                values: |2
-                  autoDirectNodeRoutes: true
-                  bpf:
-                    masquerade: true
-                  bgp:
-                    enabled: false
-                  cluster:
-                    name: home-cluster
-                    id: 1
-                  containerRuntime:
-                    integration: containerd
-                    socketPath: /var/run/k0s/containerd.sock
-                  endpointRoutes:
-                    enabled: true
-                  hubble:
-                    enabled: false
-                  ipam:
-                    mode: kubernetes
-                  ipv4NativeRoutingCIDR: "#{ bootstrap_cluster_cidr }#"
-                  #% if bootstrap_ipv6_enabled | default(false) %#
-                  ipv6NativeRoutingCIDR: "#{ bootstrap_cluster_cidr_v6 }#"
-                  ipv6:
-                    enabled: true
-                  #% endif %#
-                  #% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr | default('') %#
-                  k8sServiceHost: "#{ bootstrap_kube_api_addr }#"
-                  #% else %#
-                  k8sServiceHost: "#{ bootstrap_nodes.master[0].address }#"
-                  #% endif %#
-                  k8sServicePort: 6443
-                  kubeProxyReplacement: true
-                  kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
-                  l2announcements:
-                    #% if bootstrap_ipv6_enabled | default(false) %#
-                    enabled: false
-                    #% else %#
-                    enabled: true
-                    # https://github.com/cilium/cilium/issues/26586
-                    leaseDuration: 120s
-                    leaseRenewDeadline: 60s
-                    leaseRetryPeriod: 1s
-                    #% endif %#
-                  loadBalancer:
-                    algorithm: maglev
-                    mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
-                  localRedirectPolicy: true
-                  operator:
-                    replicas: 1
-                    rollOutPods: true
-                  rollOutCiliumPods: true
-                  routingMode: native
-                  securityContext:
-                    privileged: true
+                  #% filter indent(width=18, first=True) %#
+                  #% include 'partials/cilium-values-init.yaml.partial' %#
+                  #% endfilter %#
 #% endif %#
@@ -0,0 +1,113 @@
+autoDirectNodeRoutes: true
+bpf:
+  masquerade: true
+bgp:
+  enabled: false
+cluster:
+  name: home-cluster
+  id: 1
+containerRuntime:
+  integration: containerd
+  #% if bootstrap_distribution == "k3s" %#
+  socketPath: /var/run/k3s/containerd/containerd.sock
+  #% elif bootstrap_distribution == "k0s" %#
+  socketPath: /var/run/k0s/containerd.sock
+  #% endif %#
+endpointRoutes:
+  enabled: true
+hubble:
+  enabled: true
+  metrics:
+    enabled:
+      - dns:query
+      - drop
+      - tcp
+      - flow
+      - port-distribution
+      - icmp
+      - http
+    serviceMonitor:
+      enabled: true
+    dashboards:
+      enabled: true
+      annotations:
+        grafana_folder: Cilium
+  relay:
+    enabled: true
+    rollOutPods: true
+    prometheus:
+      serviceMonitor:
+        enabled: true
+  ui:
+    enabled: true
+    rollOutPods: true
+    ingress:
+      enabled: true
+      className: internal
+      #% if homepage.enabled | default(false) %#
+      annotations:
+        gethomepage.dev/enabled: "true"
+        gethomepage.dev/group: Network
+        gethomepage.dev/name: Cilium
+        gethomepage.dev/icon: cilium.png
+      #% endif %#
+      hosts:
+        - "hubble.${SECRET_DOMAIN}"
+      tls:
+        - hosts:
+            - "hubble.${SECRET_DOMAIN}"
+ipam:
+  mode: kubernetes
+ipv4NativeRoutingCIDR: "${CLUSTER_CIDR}"
+#% if bootstrap_ipv6_enabled | default(false) %#
+ipv6NativeRoutingCIDR: "${CLUSTER_CIDR_V6}"
+ipv6:
+  enabled: true
+#% endif %#
+#% if bootstrap_distribution == "k3s" %#
+k8sServiceHost: 127.0.0.1
+k8sServicePort: 6444
+#% elif bootstrap_distribution == "k0s"  %#
+k8sServiceHost: localhost
+k8sServicePort: 7443
+#% endif %#
+kubeProxyReplacement: true
+kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
+l2announcements:
+  #% if bootstrap_ipv6_enabled | default(false) %#
+  enabled: false
+  #% else %#
+  enabled: true
+  # https://github.com/cilium/cilium/issues/26586
+  leaseDuration: 120s
+  leaseRenewDeadline: 60s
+  leaseRetryPeriod: 1s
+  #% endif %#
+loadBalancer:
+  algorithm: maglev
+  mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
+localRedirectPolicy: true
+operator:
+  replicas: 1
+  rollOutPods: true
+  prometheus:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+  dashboards:
+    enabled: true
+    annotations:
+      grafana_folder: Cilium
+prometheus:
+  enabled: true
+  serviceMonitor:
+    enabled: true
+    trustCRDsExist: true
+dashboards:
+  enabled: true
+  annotations:
+    grafana_folder: Cilium
+rollOutCiliumPods: true
+routingMode: native
+securityContext:
+  privileged: true
@@ -0,0 +1,57 @@
+autoDirectNodeRoutes: true
+bpf:
+  masquerade: true
+bgp:
+  enabled: false
+cluster:
+  name: home-cluster
+  id: 1
+containerRuntime:
+  integration: containerd
+  #% if bootstrap_distribution == "k3s" %#
+  socketPath: /var/run/k3s/containerd/containerd.sock
+  #% elif bootstrap_distribution == "k0s" %#
+  socketPath: /var/run/k0s/containerd.sock
+  #% endif %#
+endpointRoutes:
+  enabled: true
+hubble:
+  enabled: false
+ipam:
+  mode: kubernetes
+ipv4NativeRoutingCIDR: "#{ bootstrap_cluster_cidr }#"
+#% if bootstrap_ipv6_enabled | default(false) %#
+ipv6NativeRoutingCIDR: "#{ bootstrap_cluster_cidr_v6 }#"
+ipv6:
+  enabled: true
+#% endif %#
+#% if bootstrap_distribution == "k3s" %#
+k8sServiceHost: 127.0.0.1
+k8sServicePort: 6444
+#% elif bootstrap_distribution == "k0s"  %#
+k8sServiceHost: localhost
+k8sServicePort: 7443
+#% endif %#
+kubeProxyReplacement: true
+kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
+l2announcements:
+  #% if bootstrap_ipv6_enabled | default(false) %#
+  enabled: false
+  #% else %#
+  enabled: true
+  # https://github.com/cilium/cilium/issues/26586
+  leaseDuration: 120s
+  leaseRenewDeadline: 60s
+  leaseRetryPeriod: 1s
+  #% endif %#
+loadBalancer:
+  algorithm: maglev
+  mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
+localRedirectPolicy: true
+operator:
+  replicas: 1
+  rollOutPods: true
+rollOutCiliumPods: true
+routingMode: native
+securityContext:
+  privileged: true
@@ -46,7 +46,7 @@ bootstrap_node_cidr:
 # and keepalived in k0s and use the master node IP instead
 bootstrap_kube_api_addr:
 # (Optional) The hostname of the Kube API, set this if you intend to call the Kube API by
-# hostname rather than IP. Hostname is added to the Kube API cert sans
+# hostname rather than IP. If the hostname is set it is added to the Kube API cert sans
 bootstrap_kube_api_hostname:
 # The Load balancer IP for k8s_gateway, choose an available IP in your nodes network that is not being used
 bootstrap_k8s_gateway_addr: