23 lines
837 B
Bash
23 lines
837 B
Bash
#!/usr/bin/bash
|
|
|
|
helm template \
|
|
cilium \
|
|
cilium/cilium \
|
|
--version 1.16.5 \
|
|
--namespace kube-system \
|
|
--set bgpControlPlane.enabled=true \
|
|
--set hubble.preferIpv6=true \
|
|
--set ipv6.enabled=true \
|
|
--set ipam.mode=kubernetes \
|
|
--set kubeProxyReplacement=true \
|
|
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
|
|
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
|
|
--set cgroup.autoMount.enabled=false \
|
|
--set cgroup.hostRoot=/sys/fs/cgroup \
|
|
--set k8sServiceHost=localhost \
|
|
--set k8sServicePort=7445 \
|
|
--set gatewayAPI.enabled=true \
|
|
--set gatewayAPI.enableAlpn=true \
|
|
--set gatewayAPI.enableAppProtocol=true \
|
|
> cilium.yaml
|