Adding Cilium specific CNI ingress rules in AWSCluster for ClusterAPI

Signed-off-by: Archisman <archisman@obmondo.com>
Obmondo · Aug 20, 2024 · d924b26 · d924b26
1 parent a15d1f6
commit d924b26
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/argocd-helm-charts/capi-cluster/charts/aws/templates/AWSCluster.yaml b/argocd-helm-charts/capi-cluster/charts/aws/templates/AWSCluster.yaml
@@ -11,5 +11,19 @@ spec:
   network:
     vpc:
       cidrBlock: {{ .Values.vpc.cidrBlock }}
+    cni:
+      cniIngressRules:
+        - description: Cilium
+          protocol: "tcp"
+          fromPort: 4240
+          toPort: 4240
+        - description: Cilium VXLAN overlay
+          protocol: "udp"
+          fromPort: 8472
+          toPort: 8472
+        - description: Cilium health checks
+          protocol: "icmp"
+          fromPort: 8
+          toPort: 8
   controlPlaneLoadBalancer:
     loadBalancerType: {{ .Values.controlPlane.loadBalancerType }}