diff --git a/clusters/homelab/infrastructure/cilium.yaml b/clusters/homelab/infrastructure/cilium.yaml new file mode 100644 index 0000000..c8375d2 --- /dev/null +++ b/clusters/homelab/infrastructure/cilium.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: cilium + namespace: flux-system +spec: + interval: 10m + path: ./clusters/homelab/infrastructure/cilium + prune: true + sourceRef: + kind: GitRepository + name: flux-system diff --git a/clusters/homelab/infrastructure/cilium/helmrelease.yaml b/clusters/homelab/infrastructure/cilium/helmrelease.yaml new file mode 100644 index 0000000..7c1cb15 --- /dev/null +++ b/clusters/homelab/infrastructure/cilium/helmrelease.yaml @@ -0,0 +1,45 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: cilium + namespace: kube-system +spec: + interval: 30m + chart: + spec: + chart: cilium + version: "1.19.1" + sourceRef: + kind: HelmRepository + name: cilium + namespace: kube-system + interval: 24h + install: + crds: CreateReplace + upgrade: + crds: CreateReplace + values: + ipam: + mode: kubernetes + kubeProxyReplacement: true + securityContext: + capabilities: + ciliumAgent: + - CHOWN + - KILL + - NET_ADMIN + - NET_RAW + - IPC_LOCK + - SYS_ADMIN + - SYS_RESOURCE + - DAC_OVERRIDE + - FOWNER + - SETGID + - SETUID + cleanCiliumState: + - NET_ADMIN + - SYS_ADMIN + - SYS_RESOURCE + # Gateway API aktivieren + gatewayAPI: + enabled: true diff --git a/clusters/homelab/infrastructure/cilium/helmrepository.yaml b/clusters/homelab/infrastructure/cilium/helmrepository.yaml new file mode 100644 index 0000000..a34a57a --- /dev/null +++ b/clusters/homelab/infrastructure/cilium/helmrepository.yaml @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: cilium + namespace: kube-system +spec: + interval: 24h + url: https://helm.cilium.io/ diff --git a/clusters/homelab/infrastructure/cilium/kustomization.yaml b/clusters/homelab/infrastructure/cilium/kustomization.yaml new file mode 100644 index 0000000..d7fbb03 --- /dev/null +++ b/clusters/homelab/infrastructure/cilium/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - helmrepository.yaml + - helmrelease.yaml