fix: cilium helmrelease

rafaribe · May 31, 2024 · 06c9e06 · 06c9e06
1 parent e795907
commit 06c9e06
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 3 deletions.
diff --git a/kubernetes/main/apps/kube-system/cilium/app/helmrelease.yaml b/kubernetes/main/apps/kube-system/cilium/app/helmrelease.yaml
@@ -95,9 +95,9 @@ spec:
                 - *host
     ipam:
       mode: kubernetes
-    ipv4NativeRoutingCIDR: 10.32.0.0/16
-    k8sServiceHost: 10.0.1.17
-    k8sServicePort: 6443
+    ipv4NativeRoutingCIDR: 10.42.0.0/16
+    k8sServiceHost: 127.0.0.1
+    k8sServicePort: 7445
     kubeProxyReplacement: true
     kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
     l2announcements:

diff --git a/kubernetes/main/apps/kube-system/cilium/app/values.yaml b/kubernetes/main/apps/kube-system/cilium/app/values.yaml
@@ -58,3 +58,21 @@ securityContext:
 bgpControlPlane:
   # -- Enables the BGP control plane.
   enabled: true
+
+## Gateway API
+gatewayAPI:
+  # -- Enable support for Gateway API in cilium
+  # This will automatically set enable-envoy-config as well.
+  enabled: true
+
+  # -- SecretsNamespace is the namespace in which envoy SDS will retrieve TLS secrets from.
+  secretsNamespace:
+    # -- Create secrets namespace for Gateway API.
+    create: true
+
+    # -- Name of Gateway API secret namespace.
+    name: cilium-secrets
+
+    # -- Enable secret sync, which will make sure all TLS secrets used by Ingress are synced to secretsNamespace.name.
+    # If disabled, TLS secrets must be maintained externally.
+    sync: true