alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

Automated Manifest Update (#2342)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2342
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #2342.
This commit is contained in:
gitea-bot
2025-12-10 00:19:03 +00:00
committed by Alex Lebens
parent 648daeec0a
commit 81048e096c
1118 changed files with 29 additions and 1632 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
clusters/cl01tl/manifests/cilium/CiliumLoadBalancerIPPool-bgp-ip-pool.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/templates/cilium-load-balancer-ip-pool.yaml
apiVersion: "cilium.io/v2alpha1"
kind: CiliumLoadBalancerIPPool
metadata:

1
clusters/cl01tl/manifests/cilium/CiliumLoadBalancerIPPool-default-ip-pool.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/templates/cilium-load-balancer-ip-pool.yaml
apiVersion: "cilium.io/v2alpha1"
kind: CiliumLoadBalancerIPPool
metadata:

21
clusters/cl01tl/manifests/cilium/ClusterRole-cilium-operator.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
@@ -15,8 +14,6 @@ rules:
- get
- list
- watch
# to automatically delete [core|kube]dns pods so that are starting to being
# managed by Cilium
- delete
- apiGroups:
- ""
@@ -25,7 +22,6 @@ rules:
resourceNames:
- cilium-config
verbs:
# allow patching of the configmap to set annotations
- patch
- apiGroups:
- ""
@@ -37,9 +33,7 @@ rules:
- apiGroups:
- ""
resources:
# To remove node taints
- nodes
# To set NetworkUnavailable false on startup
- nodes/status
verbs:
- patch
@@ -54,7 +48,6 @@ rules:
- apiGroups:
- ""
resources:
# to perform LB IP allocation for BGP
- services/status
verbs:
- update
@@ -62,7 +55,6 @@ rules:
- apiGroups:
- ""
resources:
# to check apiserver connectivity
- namespaces
- secrets
verbs:
@@ -72,7 +64,6 @@ rules:
- apiGroups:
- ""
resources:
# to perform the translation of a CNP that contains `ToGroup` to its endpoints
- services
- endpoints
verbs:
@@ -89,11 +80,9 @@ rules:
- ciliumnetworkpolicies
- ciliumclusterwidenetworkpolicies
verbs:
# Create auto-generated CNPs and CCNPs from Policies that have 'toGroups'
- create
- update
- deletecollection
# To update the status of the CNPs and CCNPs
- patch
- get
- list
@@ -104,7 +93,6 @@ rules:
- ciliumnetworkpolicies/status
- ciliumclusterwidenetworkpolicies/status
verbs:
# Update the auto-generated CNPs and CCNPs status.
- patch
- update
- apiGroups:
@@ -113,7 +101,6 @@ rules:
- ciliumendpoints
- ciliumidentities
verbs:
# To perform garbage collection of such resources
- delete
- list
- watch
@@ -122,7 +109,6 @@ rules:
resources:
- ciliumidentities
verbs:
# To synchronize garbage collection of such resources
- update
- apiGroups:
- cilium.io
@@ -134,7 +120,6 @@ rules:
- get
- list
- watch
# To perform CiliumNode garbage collector
- delete
- apiGroups:
- cilium.io
@@ -228,12 +213,6 @@ rules:
- ciliumloadbalancerippools/status
verbs:
- patch
# For cilium-operator running in HA mode.
#
# Cilium operator running in HA mode requires the use of ResourceLock for Leader Election
# between multiple running instances.
# The preferred way of doing this is to use LeasesResourceLock as edits to Leases are less
# common and fewer objects in the cluster watch "all Leases".
- apiGroups:
- coordination.k8s.io
resources:

5
clusters/cl01tl/manifests/cilium/ClusterRole-cilium.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
@@ -42,9 +41,6 @@ rules:
verbs:
- list
- watch
# This is used when validating policies in preflight. This will need to stay
# until we figure out how to avoid "get" inside the preflight, and then
# should be removed ideally.
- get
- apiGroups:
- cilium.io
@@ -81,7 +77,6 @@ rules:
- create
- apiGroups:
- cilium.io
# To synchronize garbage collection of such resources
resources:
- ciliumidentities
verbs:

1
clusters/cl01tl/manifests/cilium/ClusterRole-hubble-ui.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-ui/clusterrole.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:

1
clusters/cl01tl/manifests/cilium/ClusterRoleBinding-cilium-operator.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/clusterrolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:

1
clusters/cl01tl/manifests/cilium/ClusterRoleBinding-cilium.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/clusterrolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:

1
clusters/cl01tl/manifests/cilium/ClusterRoleBinding-hubble-ui.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-ui/clusterrolebinding.yaml
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:

88
clusters/cl01tl/manifests/cilium/ConfigMap-cilium-config.yaml
View File

@@ -1,51 +1,20 @@
---
# Source: cilium/charts/cilium/templates/cilium-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: cilium-config
namespace: kube-system
data:
# Identity allocation mode selects how identities are shared between cilium
# nodes by setting how they are stored. The options are "crd", "kvstore" or
# "doublewrite-readkvstore" / "doublewrite-readcrd".
# - "crd" stores identities in kubernetes as CRDs (custom resource definition).
# These can be queried with:
# kubectl get ciliumid
# - "kvstore" stores identities in an etcd kvstore, that is
# configured below. Cilium versions before 1.6 supported only the kvstore
# backend. Upgrades from these older cilium versions should continue using
# the kvstore by commenting out the identity-allocation-mode below, or
# setting it to "kvstore".
# - "doublewrite" modes store identities in both the kvstore and CRDs. This is useful
# for seamless migrations from the kvstore mode to the crd mode. Consult the
# documentation for more information on how to perform the migration.
identity-allocation-mode: crd
identity-heartbeat-timeout: "30m0s"
identity-gc-interval: "15m0s"
cilium-endpoint-gc-interval: "5m0s"
nodes-gc-interval: "5m0s"
# If you want to run cilium in debug mode change this value to true
debug: "false"
metrics-sampling-interval: "5m"
# The agent can be put into the following three policy enforcement modes
# default, always and never.
# https://docs.cilium.io/en/latest/security/policy/intro/#policy-enforcement-modes
enable-policy: "default"
# If you want metrics enabled in all of your Cilium agents, set the port for
# which the Cilium agents will have their metrics exposed.
# This option deprecates the "prometheus-serve-addr" in the
# "cilium-metrics-config" ConfigMap
# NOTE that this will open the port on ALL nodes where Cilium pods are
# scheduled.
prometheus-serve-addr: ":9962"
# A space-separated list of controller groups for which to enable metrics.
# The special values of "all" and "none" are supported.
controller-group-metrics: write-cni-file sync-host-ips sync-lb-maps-with-k8s-services
# If you want metrics enabled in cilium-operator, set the port for
# which the Cilium Operator will have their metrics exposed.
# NOTE that this will open the port on the nodes where Cilium operator pod
# is scheduled.
operator-prometheus-serve-addr: ":9963"
enable-metrics: "true"
enable-envoy-config: "true"
@@ -63,41 +32,16 @@ data:
enable-policy-secrets-sync: "true"
policy-secrets-only-from-secrets-namespace: "true"
policy-secrets-namespace: "cilium-secrets"
# Enable IPv4 addressing. If enabled, all endpoints are allocated an IPv4
# address.
enable-ipv4: "true"
# Enable IPv6 addressing. If enabled, all endpoints are allocated an IPv6
# address.
enable-ipv6: "false"
# Users who wish to specify their own custom CNI configuration file must set
# custom-cni-conf to "true", otherwise Cilium may overwrite the configuration.
custom-cni-conf: "false"
enable-bpf-clock-probe: "false"
# If you want cilium monitor to aggregate tracing for packets, set this level
# to "low", "medium", or "maximum". The higher the level, the less packets
# that will be seen in monitor output.
monitor-aggregation: medium
# The monitor aggregation interval governs the typical time between monitor
# notification events for each allowed connection.
#
# Only effective when monitor aggregation is set to "medium" or higher.
monitor-aggregation-interval: "5s"
# The monitor aggregation flags determine which TCP flags which, upon the
# first observation, cause monitor notifications to be generated.
#
# Only effective when monitor aggregation is set to "medium" or higher.
monitor-aggregation-flags: all
# Specifies the ratio (0.0-1.0] of total system memory to use for dynamic
# sizing of the TCP CT, non-TCP CT, NAT and policy BPF maps.
bpf-map-dynamic-size-ratio: "0.0025"
# bpf-policy-map-max specifies the maximum number of entries in endpoint
# policy map (per endpoint)
bpf-policy-map-max: "16384"
# bpf-policy-stats-map-max specifies the maximum number of entries in global
# policy stats map
bpf-policy-stats-map-max: "65536"
# bpf-lb-map-max specifies the maximum number of entries in bpf lb service,
# backend and affinity maps.
bpf-lb-map-max: "65536"
bpf-lb-external-clusterip: "false"
bpf-lb-source-range-all-types: "false"
@@ -107,37 +51,13 @@ data:
bpf-events-drop-enabled: "true"
bpf-events-policy-verdict-enabled: "true"
bpf-events-trace-enabled: "true"
# Pre-allocation of map entries allows per-packet latency to be reduced, at
# the expense of up-front memory allocation for the entries in the maps. The
# default value below will minimize memory usage in the default installation;
# users who are sensitive to latency may consider setting this to "true".
#
# This option was introduced in Cilium 1.4. Cilium 1.3 and earlier ignore
# this option and behave as though it is set to "true".
#
# If this value is modified, then during the next Cilium startup the restore
# of existing endpoints and tracking of ongoing connections may be disrupted.
# As a result, reply packets may be dropped and the load-balancing decisions
# for established connections may change.
#
# If this option is set to "false" during an upgrade from 1.3 or earlier to
# 1.4 or later, then it may cause one-time disruptions during the upgrade.
preallocate-bpf-maps: "false"
# Name of the cluster. Only relevant when building a mesh of clusters.
cluster-name: "default"
# Unique ID of the cluster. Must be unique across all conneted clusters and
# in the range of 1 and 255. Only relevant when building a mesh of clusters.
cluster-id: "0"
# Encapsulation mode for communication between nodes
# Possible values:
# - disabled
# - vxlan (default)
# - geneve
routing-mode: "tunnel"
tunnel-protocol: "vxlan"
tunnel-source-port-range: "0-0"
service-no-backend-response: "reject"
# Enables L7 proxy for L7 policy enforcement and visibility
enable-l7-proxy: "true"
enable-ipv4-masquerade: "true"
enable-ipv4-big-tcp: "false"
@@ -151,8 +71,6 @@ data:
iptables-random-fully: "false"
auto-direct-node-routes: "false"
direct-routing-skip-unreachable: "false"
# List of devices used to attach bpf_host.o (implements BPF NodePort,
# host-firewall and BPF masquerading)
devices: "end0 enp6s0"
kube-proxy-replacement: "true"
kube-proxy-replacement-healthz-bind-address: ""
@@ -169,7 +87,6 @@ data:
k8s-require-ipv6-pod-cidr: "false"
enable-k8s-networkpolicy: "true"
enable-endpoint-lockdown-on-policy-overflow: "false"
# Tell the agent to generate and write a CNI configuration file
write-cni-conf-when-ready: /host/etc/cni/net.d/05-cilium.conflist
cni-exclusive: "true"
cni-log-file: "/var/run/cilium/cilium-cni.log"
@@ -181,10 +98,8 @@ data:
synchronize-k8s-nodes: "true"
operator-api-serve-addr: "127.0.0.1:9234"
enable-hubble: "true"
# UNIX domain socket for Hubble server to listen to.
hubble-socket-path: "/var/run/cilium/hubble.sock"
hubble-network-policy-correlation-enabled: "true"
# An additional address for Hubble server to listen to (e.g. ":4244").
hubble-listen-address: ":4244"
hubble-disable-tls: "false"
hubble-tls-cert-file: /var/lib/cilium/tls/hubble/server.crt
@@ -213,7 +128,6 @@ data:
set-cilium-node-taints: "true"
set-cilium-is-up-condition: "true"
unmanaged-pod-watcher-interval: "15"
# default DNS proxy to transparent mode in non-chaining modes
dnsproxy-enable-transparent-mode: "true"
dnsproxy-socket-linger-timeout: "10"
tofqdns-dns-reject-response-code: "refused"
@@ -252,5 +166,3 @@ data:
enable-lb-ipam: "true"
enable-non-default-deny-policies: "true"
enable-source-ip-verification: "true"
# Extra config allows adding arbitrary properties to the cilium config.
# By putting it at the end of the ConfigMap, it's also possible to override existing properties.

2
clusters/cl01tl/manifests/cilium/ConfigMap-cilium-envoy-config.yaml
View File

File diff suppressed because one or more lines are too long

1
clusters/cl01tl/manifests/cilium/ConfigMap-hubble-relay-config.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-relay/configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:

1
clusters/cl01tl/manifests/cilium/ConfigMap-hubble-ui-nginx.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-ui/configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:

4
clusters/cl01tl/manifests/cilium/DaemonSet-cilium-envoy.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-envoy/daemonset.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
@@ -161,13 +160,10 @@ spec:
- name: envoy-config
configMap:
name: "cilium-envoy-config"
# note: the leading zero means this number is in octal representation: do not remove it
defaultMode: 0400
items:
- key: bootstrap-config.json
path: bootstrap-config.json
# To keep state between restarts / upgrades
# To keep state between restarts / upgrades for bpf maps
- name: bpf-maps
hostPath:
path: /sys/fs/bpf

48
clusters/cl01tl/manifests/cilium/DaemonSet-cilium.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/daemonset.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
@@ -20,7 +19,6 @@ spec:
template:
metadata:
annotations:
# ensure pods roll when configmap updates
cilium.io/cilium-configmap-checksum: "31ad7748e0aefe75b6436d96c8c85754e0b44e68e6012fa188bc5bcd66085828"
kubectl.kubernetes.io/default-container: cilium-agent
labels:
@@ -173,22 +171,13 @@ spec:
- name: envoy-sockets
mountPath: /var/run/cilium/envoy/sockets
readOnly: false
# Unprivileged containers need to mount /proc/sys/net from the host
# to have write access
- mountPath: /host/proc/sys/net
name: host-proc-sys-net
# Unprivileged containers need to mount /proc/sys/kernel from the host
# to have write access
- mountPath: /host/proc/sys/kernel
name: host-proc-sys-kernel
- name: bpf-maps
mountPath: /sys/fs/bpf
# Unprivileged containers can't set mount propagation to bidirectional
# in this case we will mount the bpf fs from an init container that
# is privileged and set the mount propagation from host to container
# in Cilium.
mountPropagation: HostToContainer
# Check for duplicate mounts before mounting
- name: cilium-cgroup
mountPath: /sys/fs/cgroup
- name: cilium-run
@@ -201,7 +190,6 @@ spec:
- name: clustermesh-secrets
mountPath: /var/lib/cilium/clustermesh
readOnly: true
# Needed to be able to load kernel modules
- name: lib-modules
mountPath: /lib/modules
readOnly: true
@@ -247,11 +235,6 @@ spec:
command:
- sh
- -ec
# The statically linked Go program binary is invoked to avoid any
# dependency on utilities like sh that can be missing on certain
# distros installed on the underlying host. Copy the binary to the
# same directory where we install cilium cni plugin so that exec permissions
# are available.
- |
cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;
nsenter --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-sysctlfix";
@@ -273,9 +256,6 @@ spec:
- SYS_PTRACE
drop:
- ALL
# Mount the bpf fs if it is not mounted. We will perform this task
# from a privileged container because the mount propagation bidirectional
# only works from privileged containers.
- name: mount-bpf-fs
image: "quay.io/cilium/cilium:v1.18.4@sha256:49d87af187eeeb9e9e3ec2bc6bd372261a0b5cb2d845659463ba7cc10fe9e45f"
imagePullPolicy: IfNotPresent
@@ -335,13 +315,11 @@ spec:
volumeMounts:
- name: bpf-maps
mountPath: /sys/fs/bpf
# Required to mount cgroup filesystem from the host to cilium agent pod
- name: cilium-cgroup
mountPath: /sys/fs/cgroup
mountPropagation: HostToContainer
- name: cilium-run
mountPath: /var/run/cilium # wait-for-kube-proxy
# Install the CNI binaries in an InitContainer so we don't have a writable host mount in the agent
mountPath: /var/run/cilium
- name: install-cni-binaries
image: "quay.io/cilium/cilium:v1.18.4@sha256:49d87af187eeeb9e9e3ec2bc6bd372261a0b5cb2d845659463ba7cc10fe9e45f"
imagePullPolicy: IfNotPresent
@@ -361,7 +339,7 @@ spec:
terminationMessagePolicy: FallbackToLogsOnError
volumeMounts:
- name: cni-path
mountPath: /host/opt/cni/bin # .Values.cni.install
mountPath: /host/opt/cni/bin
restartPolicy: Always
priorityClassName: system-node-critical
serviceAccountName: "cilium"
@@ -380,71 +358,54 @@ spec:
tolerations:
- operator: Exists
volumes:
# For sharing configuration between the "config" initContainer and the agent
- name: tmp
emptyDir: {}
# To keep state between restarts / upgrades
- name: cilium-run
hostPath:
path: /var/run/cilium
type: DirectoryOrCreate
# To exec into pod network namespaces
- name: cilium-netns
hostPath:
path: /var/run/netns
type: DirectoryOrCreate
# To keep state between restarts / upgrades for bpf maps
- name: bpf-maps
hostPath:
path: /sys/fs/bpf
type: DirectoryOrCreate
# To mount cgroup2 filesystem on the host or apply sysctlfix
- name: hostproc
hostPath:
path: /proc
type: Directory
# To keep state between restarts / upgrades for cgroup2 filesystem
- name: cilium-cgroup
hostPath:
path: /sys/fs/cgroup
type: DirectoryOrCreate
# To install cilium cni plugin in the host
- name: cni-path
hostPath:
path: /opt/cni/bin
type: DirectoryOrCreate
# To install cilium cni configuration in the host
- name: etc-cni-netd
hostPath:
path: /etc/cni/net.d
type: DirectoryOrCreate
# To be able to load kernel modules
- name: lib-modules
hostPath:
path: /lib/modules
# To access iptables concurrently with other processes (e.g. kube-proxy)
- name: xtables-lock
hostPath:
path: /run/xtables.lock
type: FileOrCreate
# Sharing socket with Cilium Envoy on the same node by using a host path
- name: envoy-sockets
hostPath:
path: "/var/run/cilium/envoy/sockets"
type: DirectoryOrCreate
# To read the clustermesh configuration
- name: clustermesh-secrets
projected:
# note: the leading zero means this number is in octal representation: do not remove it
defaultMode: 0400
sources:
- secret:
name: cilium-clustermesh
optional: true
# note: items are not explicitly listed here, since the entries of this secret
# depend on the peers configured, and that would cause a restart of all agents
# at every addition/removal. Leaving the field empty makes each secret entry
# to be automatically projected into the volume as a file whose name is the key.
- secret:
name: clustermesh-apiserver-remote-cert
optional: true
@@ -455,10 +416,6 @@ spec:
path: common-etcd-client.crt
- key: ca.crt
path: common-etcd-client-ca.crt
# note: we configure the volume for the kvstoremesh-specific certificate
# regardless of whether KVStoreMesh is enabled or not, so that it can be
# automatically mounted in case KVStoreMesh gets subsequently enabled,
# without requiring an agent restart.
- secret:
name: clustermesh-apiserver-local-cert
optional: true
@@ -479,7 +436,6 @@ spec:
type: Directory
- name: hubble-tls
projected:
# note: the leading zero means this number is in octal representation: do not remove it
defaultMode: 0400
sources:
- secret:

11
clusters/cl01tl/manifests/cilium/Deployment-cilium-operator.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
@@ -11,17 +10,11 @@ metadata:
app.kubernetes.io/part-of: cilium
app.kubernetes.io/name: cilium-operator
spec:
# See docs on ServerCapabilities.LeasesResourceLock in file pkg/k8s/version/version.go
# for more details.
replicas: 2
selector:
matchLabels:
io.cilium/app: operator
name: cilium-operator
# ensure operator update on single node k8s clusters, by using rolling update with maxUnavailable=100% in case
# of one replica and no user configured Recreate strategy.
# otherwise an update might get stuck due to the default maxUnavailable=50% in combination with the
# podAntiAffinity which prevents deployments of multiple operator replicas on the same node.
strategy:
rollingUpdate:
maxSurge: 25%
@@ -30,7 +23,6 @@ spec:
template:
metadata:
annotations:
# ensure pods roll when configmap updates
cilium.io/cilium-configmap-checksum: "31ad7748e0aefe75b6436d96c8c85754e0b44e68e6012fa188bc5bcd66085828"
labels:
io.cilium/app: operator
@@ -110,8 +102,6 @@ spec:
priorityClassName: system-cluster-critical
serviceAccountName: "cilium-operator"
automountServiceAccountToken: true
# In HA mode, cilium-operator pods must not be scheduled on the same
# node as they will clash with each other.
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
@@ -133,7 +123,6 @@ spec:
- key: node.cilium.io/agent-not-ready
operator: Exists
volumes:
# To read the configuration from the config map
- name: cilium-config-path
configMap:
name: cilium-config

17
clusters/cl01tl/manifests/cilium/Deployment-hubble-relay.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-relay/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
@@ -55,33 +54,18 @@ spec:
grpc:
port: 4222
timeoutSeconds: 3
# livenessProbe will kill the pod, we should be very conservative
# here on failures since killing the pod should be a last resort, and
# we should provide enough time for relay to retry before killing it.
livenessProbe:
grpc:
port: 4222
timeoutSeconds: 10
# Give relay time to establish connections and make a few retries
# before starting livenessProbes.
initialDelaySeconds: 10
# 10 second * 12 failures = 2 minutes of failure.
# If relay cannot become healthy after 2 minutes, then killing it
# might resolve whatever issue is occurring.
#
# 10 seconds is a reasonable retry period so we can see if it's
# failing regularly or only sporadically.
periodSeconds: 10
failureThreshold: 12
startupProbe:
grpc:
port: 4222
# Give relay time to get it's certs and establish connections and
# make a few retries before starting startupProbes.
initialDelaySeconds: 10
# 20 * 3 seconds = 1 minute of failure before we consider startup as failed.
failureThreshold: 20
# Retry more frequently at startup so that it can be considered started more quickly.
periodSeconds: 3
volumeMounts:
- name: config
@@ -114,7 +98,6 @@ spec:
path: config.yaml
- name: tls
projected:
# note: the leading zero means this number is in octal representation: do not remove it
defaultMode: 0400
sources:
- secret:

1
clusters/cl01tl/manifests/cilium/Deployment-hubble-ui.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-ui/deployment.yaml
kind: Deployment
apiVersion: apps/v1
metadata:

1
clusters/cl01tl/manifests/cilium/HTTPRoute-http-route-hubble.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/templates/http-route.yaml
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:

2
clusters/cl01tl/manifests/cilium/Namespace-cilium-secrets.yaml
View File

@@ -1,5 +1,3 @@
---
# Source: cilium/charts/cilium/templates/cilium-secrets-namespace.yaml
apiVersion: v1
kind: Namespace
metadata:

1
clusters/cl01tl/manifests/cilium/Role-cilium-config-agent.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:

1
clusters/cl01tl/manifests/cilium/Role-cilium-gateway-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:

1
clusters/cl01tl/manifests/cilium/Role-cilium-operator-gateway-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:

1
clusters/cl01tl/manifests/cilium/Role-cilium-operator-tlsinterception-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:

1
clusters/cl01tl/manifests/cilium/Role-cilium-tlsinterception-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:

1
clusters/cl01tl/manifests/cilium/RoleBinding-cilium-config-agent.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:

1
clusters/cl01tl/manifests/cilium/RoleBinding-cilium-gateway-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:

1
clusters/cl01tl/manifests/cilium/RoleBinding-cilium-operator-gateway-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:

1
clusters/cl01tl/manifests/cilium/RoleBinding-cilium-operator-tlsinterception-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:

1
clusters/cl01tl/manifests/cilium/RoleBinding-cilium-tlsinterception-secrets.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:

5
clusters/cl01tl/manifests/cilium/Secret-cilium-ca.yaml
View File

@@ -1,10 +1,9 @@
---
# Source: cilium/charts/cilium/templates/cilium-ca-secret.yaml
apiVersion: v1
kind: Secret
metadata:
name: cilium-ca
namespace: kube-system
data:
ca.crt: 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
ca.key: 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
ca.crt: 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
ca.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcFFJQkFBS0NBUUVBdzNsS0dqZCsyRDA3Nm1iNGpaU2g4SStRNnQ5bkVZZUhjZVk3Z0RROUVka214ZjgzCnVuWjlxK3NNOEtDUkpGVm9veWh2clBPQjdFOWFEUDF2d3V5dUhmc2pNbERNSGd2aVAwcWw2a3VOSFFQQ3NCbUwKbHhKcUFuV1MxZ3pWOHdiRUtmVHV1bkpsUTh6ODc2d1JRWDU5bVI3djUvanM0ZXRTUzlpQjNUNHBHbEk2S3BPUgoxMUhNUmpzMjdhcTc4SFdqSk1LcGd4UGpJRDl5RUdDSkdxV0FoTWwwWnBxd0tIQkdqbzYwU0hjVWZ2ZzR6ZTRyCkU4d01vVzBwcDg0bWt5M0VhRTl6bTZEdkFycks0TWtiUFpJOVFwQ2Z6NlZ5dFg1SmNyVExSSjg5dUVTczhhK1EKb1ljRzd2bk5mNzVxMVZHK3JheE1vcjRzMUxIMll5ZnAyQWxabXdJREFRQUJBb0lCQVFDWW9NZi9tSDF1a3NHSgowVVVhSjRnYXNiN1I1Z1l3WmNhWVpORG8xZUVwWW9rbjZKTzNBSFk0R3B4TDl0UGRydUs1SXdXdjRhTDh4U2puCkk2eDBZeUhCUHlySVN0WldUNmtsQ2tCcXBQdFdRRzF2MjBKbmYzVk8za2I4NDZEYTFkbXRlUlkrZHJ3aktKZ0cKL0MrdEYvc3g2RG9pd3ZjVG9BN3VNZXVVdU1pWFIyV2hSVXhQUmk1SHNYNllmMk1XUHdsQjUwTjZvVk9Rd211Swp5THoyYTdkSG1jWTNVbVRHZlhROVBWNUgyOTJwRlpJalpTS1ZiRVdLdjRtNDVWTmdRZjBvQWdIdXJWTGhacm1pCnZlRzJ0dlFQR0dLVDQwMTd6Q0llTDN1ZU03RkdKSzhDOVBMdnVCZjRjTlBWZVVodmM1SWUxLzJJZVU5RlplUUwKUTFGbFhZZmhBb0dCQU1mMDNVVTRRUUZGYXRTTlRpL2R3cURkeVFHY2t2V0hhTS9wa05mSmRKNVVEWDdISkxmSQpCcmhpZkNFK1QyZmIyaGJoTU55cmhKS3JRT2U2MEtVMHZvYmo0aXVML2tFYzM3Ri9qKzlCWGdETnpQamxtbTJZCm5pM1hpMjBZbWJPWTFTK2ZwNGE5SVlFcGM0T05LRDlYcFcxTTZQaStSZmUxZGg5UGRPbGVxejgvQW9HQkFQcEMKeU55T3BPZjlXbTJuRWYwTDhlZmd5L2JHS1hNRkFmU2hkUHY3Y005ZERaMXkvbE1Ga2szUzBOSWd4dEJVK3BPegp3SCtGZXh3ZGZTM3V3WWY4RGN6SklPNFdwSnpRbmNBYWh1NmJ6dGpLbHNkelhtWVNBRnNiOXNxSzlQNDhzNlFhCmV6RXd1U0U3NHFOVE1hQVhUQTZ3ZnYwSzZwZGgyQ2lPUlBwM3B1cWxBb0dBVWsrb0xuQmp3Z1F6WDkvelNaeisKRzM1dzJpcjhDL3A3Mk9xSzUybFVpa0NMZFo3QXJLNjRwWHBWSXRJbG1kbFV3NHBidE5zZUxjbzFZNjd4YUxCMwpwY3QxTlB2aDVDZmdwWTZmVDV3VytEbS9vTTNUYmo0ZkR6dmxkemxqUEIwejFQRGg0NE5Eb1luUXRWeU1MdGNECmtDVFMybUpwSnZrWjhQV2lhTmJCbzcwQ2dZRUEyc211THR4cUlRTW1ubnlVUm1TOS9ObFRsNCtReHlTV25CYlgKWGtCcFZIQm1xY0xSd3lVNHpkN0RmeUQyajBYcnQxdExySEMydTFLd2tJcU9HV05yY1NCWk1LME5CcWQvY21YKwpsdllTTlFlUUlCaWxhNWpMUk52Q3V6b1dpM25vRjB5cmJNckszdG9xL2x5S0l3cWJETENTcEloNXBSVCtWQjVsCkFZKy9scDBDZ1lFQW8zSmZyRVliZFh3OUYyY2txU053ZExBWjBsQlF5VTFvQkNuekRLaXl2OVpzZXRXSmFCTXQKUE96QkVtNWFwQm9yVUlucCtOQ09uRG9ZQ2ZHdXJ1Sk00djNaZk5hN0ZtREh6WitwTnFMMmpOVE11RTR6ajNMcwpCOXR0UWE1aVZsWk5KUmxad3NQUDVISEYwcmN0QkEwOXF0aktXYjdDZFh6cDFXVlpVUFYzV01FPQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo=

7
clusters/cl01tl/manifests/cilium/Secret-hubble-relay-client-certs.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble/tls-helm/relay-client-secret.yaml
apiVersion: v1
kind: Secret
metadata:
@@ -7,6 +6,6 @@ metadata:
namespace: kube-system
type: kubernetes.io/tls
data:
ca.crt: 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
tls.crt: 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
tls.key: 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
ca.crt: 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
tls.crt: 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
tls.key: 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

7
clusters/cl01tl/manifests/cilium/Secret-hubble-server-certs.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble/tls-helm/server-secret.yaml
apiVersion: v1
kind: Secret
metadata:
@@ -7,6 +6,6 @@ metadata:
namespace: kube-system
type: kubernetes.io/tls
data:
ca.crt: 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
tls.crt: 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
tls.key: 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
ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURGRENDQWZ5Z0F3SUJBZ0lSQUtIMG55cWtZbWh6T2ViKzRaRzdJUjR3RFFZSktvWklodmNOQVFFTEJRQXcKRkRFU01CQUdBMVVFQXhNSlEybHNhWFZ0SUVOQk1CNFhEVEkxTVRJd09USXpOVEV3TTFvWERUSTRNVEl3T0RJegpOVEV3TTFvd0ZERVNNQkFHQTFVRUF4TUpRMmxzYVhWdElFTkJNSUlCSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DCkFROEFNSUlCQ2dLQ0FRRUF3M2xLR2pkKzJEMDc2bWI0alpTaDhJK1E2dDluRVllSGNlWTdnRFE5RWRrbXhmODMKdW5aOXErc004S0NSSkZWb295aHZyUE9CN0U5YURQMXZ3dXl1SGZzak1sRE1IZ3ZpUDBxbDZrdU5IUVBDc0JtTApseEpxQW5XUzFnelY4d2JFS2ZUdXVuSmxROHo4NzZ3UlFYNTltUjd2NS9qczRldFNTOWlCM1Q0cEdsSTZLcE9SCjExSE1SanMyN2FxNzhIV2pKTUtwZ3hQaklEOXlFR0NKR3FXQWhNbDBacHF3S0hCR2pvNjBTSGNVZnZnNHplNHIKRTh3TW9XMHBwODRta3kzRWFFOXptNkR2QXJySzRNa2JQWkk5UXBDZno2Vnl0WDVKY3JUTFJKODl1RVNzOGErUQpvWWNHN3ZuTmY3NXExVkcrcmF4TW9yNHMxTEgyWXlmcDJBbFptd0lEQVFBQm8yRXdYekFPQmdOVkhROEJBZjhFCkJBTUNBcVF3SFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUYKTUFNQkFmOHdIUVlEVlIwT0JCWUVGRWxLallSMUgxaHdEZjFqZjFvdmZDSmpuNFhuTUEwR0NTcUdTSWIzRFFFQgpDd1VBQTRJQkFRQUx3MlN4LzJuRy9FK0d0RGc5Z1BGbXQ3N200L1k3VUdTUms3OStXTmRFaWdsbmlLM0JSei9PCkxIbnFWazhvenRscHVlSmpDNGNYUjhISHNmeFRsemN6RjRkbTNCVmgrM0RQNEZuVVhKOUZ6aG15ZkFBcGt6WDEKODRFUHQzZVBLZHF0Q2g4TVRpQURvYlJjWHpRYjkzcWhhbGlYOThQRmo0OFFzSGxlOFQrZCtYQXpxeUtVQVM0RApmZmRPWGtaRkRqakRsMEU2dEMrcUVJSkE1ZUh2bklTTkYxaUhWWlVWWEVTZDBwWjZBaWhuT2hmSHNXWmNkaFczCmJEQWRUeEdSSXBad1RCQ3JvcUJoZkQxbzZWUjZzWElhOGdSMm1OdnN6RklrZnpaUXRkSXRuSjkzalg2djc2TVAKU3lXWS8yYm5ic043djZaTEZJVWQyMVBIM0hoRDkwbHEKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURWakNDQWo2Z0F3SUJBZ0lRSENNWVlLb09kM016dFVhN0ZqbnFkekFOQmdrcWhraUc5dzBCQVFzRkFEQVUKTVJJd0VBWURWUVFERXdsRGFXeHBkVzBnUTBFd0hoY05NalV4TWpBNU1qTTFNVEEwV2hjTk1qWXhNakE1TWpNMQpNVEEwV2pBcU1TZ3dKZ1lEVlFRRERCOHFMbVJsWm1GMWJIUXVhSFZpWW14bExXZHljR011WTJsc2FYVnRMbWx2Ck1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBMUFLdlozWFN5KzFTRjl6R1ZDSmoKVkNCemp3QkgrQjF5bEhobFVLWVo0bGtGNkYxYnh0N2wxUjZoUU44MjMwU3dCbEJURWhZMXgwbk9ieGI0eWNEcQo5SFI0TmhnMjhoUHZKLzY1Y3ZLQnZzYm1CWUNWM2hDZjUxdXpvVFlzVlp4SkEzYlp5T1dWSWpxMlJTcFpESnQzClVBdFV4Y0Foa1JIYWswQk1NUzFMRW40cVRQOHRQS0g2NHdBd2o2bXIyQXA0UzEvRmgralB0WmxIOCsweTBBdFoKTDdKU3FVZzF2YnM0TE9FZ0hleTZwMzdTRnBVVk1Bb2JGdGFWWXRIRlRPMmNLVXB0aUdQRkdTcFlkQlAwZ1YvNwpmSGNrR0pGRnNrTjlqZHBNZzBHdmIvYkJOelpwRkZTUU5CYTJSYXNnblVNa3NyRUtYS0xQSEwzMXBnREs2TGY0Cjl3SURBUUFCbzRHTk1JR0tNQTRHQTFVZER3RUIvd1FFQXdJRm9EQWRCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0QKQVFZSUt3WUJCUVVIQXdJd0RBWURWUjBUQVFIL0JBSXdBREFmQmdOVkhTTUVHREFXZ0JSSlNvMkVkUjlZY0EzOQpZMzlhTDN3aVk1K0Y1ekFxQmdOVkhSRUVJekFoZ2g4cUxtUmxabUYxYkhRdWFIVmlZbXhsTFdkeWNHTXVZMmxzCmFYVnRMbWx2TUEwR0NTcUdTSWIzRFFFQkN3VUFBNElCQVFDOHN0U1F6Z2kwaVRVU0ZJcEJkNXd2eTdDdUJMa2UKOEs4azhOY2RsbmU5RTBseXR6NUxJMDl6U1hlVUk2ZS9SQkJhbnpUbzd0MzZGU1hSTWxxcHJLRlh6cWZyOHp4MgpXdEh1WDE3OWZSUWFVR0taQTY4RG1ydGlpeFdqNWZmOGo1TU9CMjhTVDlzNHdYWEVyTXFMVDdWU1NMWkFZZ2VGCkJiVFkwM1JjdzZlSDg3TXBrak53OVN0SEpwam03bjZzdTFGUm5tNHA2NUhmUU9Qc21KeTM1QXA1aE12QVBUenIKd1VUeVlwRnlIajRXZ1d0TmtGc2RTaGV1NFVCK3dEOFJoRGJoVi90OGwzb3oxQ1puM0ZkM1JSM1N0VEoyWWRSagprQW5CLzJyYklueG5JZnJxcGtOdGpodWo3NysvZlQveGZVa0hYNG5pYndaVkdNNnRqWlQzdFFtMAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
tls.key: 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

1
clusters/cl01tl/manifests/cilium/Service-cilium-agent.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/service.yaml
apiVersion: v1
kind: Service
metadata:

1
clusters/cl01tl/manifests/cilium/Service-cilium-envoy.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-envoy/service.yaml
apiVersion: v1
kind: Service
metadata:

1
clusters/cl01tl/manifests/cilium/Service-cilium-operator.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/service.yaml
kind: Service
apiVersion: v1
metadata:

1
clusters/cl01tl/manifests/cilium/Service-hubble-peer.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble/peer-service.yaml
apiVersion: v1
kind: Service
metadata:

1
clusters/cl01tl/manifests/cilium/Service-hubble-relay.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-relay/service.yaml
kind: Service
apiVersion: v1
metadata:

1
clusters/cl01tl/manifests/cilium/Service-hubble-ui.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-ui/service.yaml
kind: Service
apiVersion: v1
metadata:

1
clusters/cl01tl/manifests/cilium/ServiceAccount-cilium-envoy.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-envoy/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:

1
clusters/cl01tl/manifests/cilium/ServiceAccount-cilium-operator.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:

1
clusters/cl01tl/manifests/cilium/ServiceAccount-cilium.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:

1
clusters/cl01tl/manifests/cilium/ServiceAccount-hubble-relay.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-relay/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:

1
clusters/cl01tl/manifests/cilium/ServiceAccount-hubble-ui.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/hubble-ui/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:

3
clusters/cl01tl/manifests/cilium/ServiceMonitor-cilium-agent.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-agent/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
@@ -26,7 +25,5 @@ spec:
sourceLabels:
- __meta_kubernetes_pod_node_name
targetLabel: node
# If envoy DaemonSet is enabled, we'll create a separate service for it
# If it is not enabled, that means envoy runs inside cilium-agent and we'll monitor using same service
targetLabels:
- k8s-app

1
clusters/cl01tl/manifests/cilium/ServiceMonitor-cilium-envoy.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-envoy/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:

1
clusters/cl01tl/manifests/cilium/ServiceMonitor-cilium-operator.yaml
View File

@@ -1,5 +1,4 @@
---
# Source: cilium/charts/cilium/templates/cilium-operator/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata: