init

clusters/cl01tl/standalone/cilium/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: cilium
+version: 1.0.0
+sources:
+  - https://github.com/cilium/cilium
+  - https://github.com/cilium/charts
+dependencies:
+  - name: cilium
+    version: 1.15.5
+    repository: https://helm.cilium.io/
+appVersion: 1.15.0

clusters/cl01tl/standalone/cilium/values.yaml

@@ -0,0 +1,71 @@
+cilium:
+  k8sServiceHost: "localhost"
+  k8sServicePort: "7445"
+  securityContext:
+    capabilities:
+      ciliumAgent:
+        - CHOWN
+        - KILL
+        - NET_ADMIN
+        - NET_RAW
+        - IPC_LOCK
+        - SYS_ADMIN
+        - SYS_RESOURCE
+        - DAC_OVERRIDE
+        - FOWNER
+        - SETGID
+        - SETUID
+      cleanCiliumState:
+        - NET_ADMIN
+        - SYS_ADMIN
+        - SYS_RESOURCE
+  enableK8sEndpointSlice: true
+  enableCiliumEndpointSlice: false
+  hubble:
+    enabled: true
+    metrics:
+      serviceMonitor:
+        enabled: true
+    relay:
+      enabled: true
+      metrics:
+        serviceMonitor:
+          enabled: true
+    ui:
+      enabled: true
+      ingress:
+        enabled: true
+        annotations:
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+          traefik.ingress.kubernetes.io/router.tls: "true"
+          cert-manager.io/cluster-issuer: letsencrypt-issuer
+        className: traefik
+        hosts:
+          - hubble.alexlebens.net
+        tls:
+          - secretName: hubble-secret-tls
+            hosts:
+              - hubble.alexlebens.net
+  ipam:
+    mode: "kubernetes"
+  ipv4:
+    enabled: true
+  ipv6:
+    enabled: false
+  kubeProxyReplacement: "true"
+  prometheus:
+    enabled: true
+    port: 9962
+    serviceMonitor:
+      enabled: true
+  operator:
+    enabled: true
+    prometheus:
+      enabled: true
+      port: 9963
+      serviceMonitor:
+        enabled: true
+  cgroup:
+    autoMount:
+      enabled: false
+    hostRoot: /sys/fs/cgroup

clusters/cl01tl/standalone/kubelet-serving-cert-approver/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: kubelet-serving-cert-approver
+version: 0.0.3
+sources:
+  - https://github.com/alex1989hu/kubelet-serving-cert-approver
+  - https://github.com/alexlebens/helm-charts/charts/homepage
+dependencies:
+  - name: kubelet-serving-cert-approver
+    version: 0.0.4
+    repository: http://alexlebens.github.io/helm-charts
+appVersion: 0.8.1

clusters/cl01tl/standalone/metrics-server/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: metrics-server
+version: 1.0.0
+sources:
+  - https://github.com/kubernetes-sigs/metrics-server
+  - https://github.com/kubernetes-sigs/metrics-server/tree/master/charts/metrics-server
+dependencies:
+  - name: metrics-server
+    version: 3.12.1
+    repository: https://kubernetes-sigs.github.io/metrics-server/
+appVersion: v0.7.0

clusters/cl01tl/standalone/metrics-server/values.yaml

@@ -0,0 +1,12 @@
+metrics-server:
+  replicas: 2
+  metrics:
+    enabled: true
+  serviceMonitor:
+    enabled: true
+  defaultArgs:
+    - --cert-dir=/tmp
+    - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
+    - --kubelet-use-node-status-port
+    - --metric-resolution=15s
+    - --kubelet-insecure-tls

clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: prometheus-operator-crds
+version: 1.0.0
+sources:
+  - https://github.com/prometheus-operator/prometheus-operator
+  - https://github.com/prometheus-community/helm-charts/
+dependencies:
+  - name: prometheus-operator-crds
+    version: 11.0.0
+    repository: https://prometheus-community.github.io/helm-charts
+appVersion: v0.72.0