-
Notifications
You must be signed in to change notification settings - Fork 0
/
.mise.toml
69 lines (67 loc) · 2.26 KB
/
.mise.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
[tools]
age = "1.1.1"
checkov = "latest"
flux2 = "latest"
helm = "latest"
k9s = "latest"
pre-commit = "latest"
sops = "latest"
talhelper = "latest"
talosctl = "latest"
terraform = "latest"
terraform-docs = "latest"
terrascan = "latest"
tflint = "latest"
trivy = "latest"
tfupdate = "latest"
"npm:commitlint" = "latest"
"npm:@commitlint/cli" = "latest"
"npm:@commitlint/config-conventional" = "latest"
[tasks.updateCiliumHelmTemplate]
description = "Update Cilium helm template"
run = """
helm template \
cilium \
cilium/cilium \
--version 1.16.2 \
--namespace kube-system \
--set ipam.mode=kubernetes \
--set kubeProxyReplacement=true \
--set securityContext.capabilities.ciliumAgent=\"{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}\" \
--set securityContext.capabilities.cleanCiliumState=\"{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}\" \
--set cgroup.autoMount.enabled=false \
--set cgroup.hostRoot=/sys/fs/cgroup \
--set k8sServiceHost=localhost \
--set k8sServicePort=7445 \
--set loadBalancer.acceleration=native \
--set ingressController.enabled=true \
--set ingressController.default=true \
--set ingressController.loadbalancerMode=dedicated \
--set bgpControlPlane.enabled=true \
--set hubble.relay.enabled=true \
--set hubble.ui.enabled=true > cilium.yaml
"""
[tasks.upgradeCiliumViaHelm]
description = "Upgrade Cilium via Helm"
run = """
helm upgrade \
cilium \
cilium/cilium \
--version 1.16.2 \
--namespace kube-system \
--set ipam.mode=kubernetes \
--set kubeProxyReplacement=true \
--set securityContext.capabilities.ciliumAgent=\"{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}\" \
--set securityContext.capabilities.cleanCiliumState=\"{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}\" \
--set cgroup.autoMount.enabled=false \
--set cgroup.hostRoot=/sys/fs/cgroup \
--set k8sServiceHost=localhost \
--set k8sServicePort=7445 \
--set loadBalancer.acceleration=native \
--set ingressController.enabled=true \
--set ingressController.default=true \
--set ingressController.loadbalancerMode=dedicated \
--set bgpControlPlane.enabled=true \
--set hubble.relay.enabled=true \
--set hubble.ui.enabled=true
"""