fixin

components/networking/configs/base/cilium/kustomization.yaml

@@ -2,4 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: kube-system
 resources: []
-

components/networking/configs/base/metal-lb/kustomization.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: metallb-system
-resources: []
+resources: 
-  # - metal-lb-ip-pool.yaml
+  - metal-lb-ip-pool.yaml
 

components/networking/configs/dev-amd64/kustomization.yaml

@@ -1,3 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-resources: []
+resources: 
+  - ../base/cilium

components/networking/configs/dev-arm64/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources: 
-  - ../base/metal-lb-ip-pool.yaml
+  - ../base/metal-lb

components/networking/controllers/base/cilium/cilium.yaml

@@ -0,0 +1,57 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: cilium
+  namespace: kube-system
+spec:
+  interval: 12h
+  url: https://helm.cilium.io/
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cilium
+  namespace: kube-system
+spec:
+  serviceAccountName: flux
+  interval: 1h
+  chart:
+    spec:
+      version: 1.18.0
+      chart: cilium
+      sourceRef:
+        kind: HelmRepository
+        name: cilium
+      interval: 12h
+  values:
+    cgroup:
+      autoMount:
+        enabled: false
+      hostRoot: /sys/fs/cgroup
+    gatewayAPI:
+      enableAlpn: true
+      enableAppProtocol: true
+      enabled: true
+    ipam:
+      mode: kubernetes
+    k8sServiceHost: localhost
+    k8sServicePort: 7445
+    kubeProxyReplacement: true
+    securityContext:
+      capabilities:
+        ciliumAgent:
+        - CHOWN
+        - KILL
+        - NET_ADMIN
+        - NET_RAW
+        - IPC_LOCK
+        - SYS_ADMIN
+        - SYS_RESOURCE
+        - DAC_OVERRIDE
+        - FOWNER
+        - SETGID
+        - SETUID
+        cleanCiliumState:
+        - NET_ADMIN
+        - SYS_ADMIN
+        - SYS_RESOURCE

components/networking/controllers/base/cilium/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources: 
+  - cilium.yaml
+

components/networking/controllers/dev-amd64/kustomization.yaml

@@ -1,3 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-resources: []
+resources: 
+  - ../base/cilium