From 524778e4989627f60e24029af80d2106378478cf Mon Sep 17 00:00:00 2001 From: Zoe Roux Date: Mon, 30 Jun 2025 21:52:43 +0200 Subject: [PATCH] Install cilium --- README.md | 26 ++++++++++++++++++++++++++ talconfig.yaml | 7 +++++++ 2 files changed, 33 insertions(+) diff --git a/README.md b/README.md index 12c7c84..766c491 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,32 @@ talhelper genconfig talosctl kubeconfig -n 192.168.0.200 -e 192.168.0.200 talosctl bootstrap +helm repo add cilium https://helm.cilium.io/ +helm install cilium cilium/cilium \ + --version 1.17.5 \ + --namespace \ + --set ipam.mode=kubernetes \ + --set kubeProxyReplacement=true \ + --set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \ + --set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \ + --set cgroup.autoMount.enabled=false \ + --set cgroup.hostRoot=/sys/fs/cgroup \ + --set k8sServiceHost=localhost \ + --set k8sServicePort=7445 \ + --set=bpf.masquerade=true \ + --set=l2announcements.enabled=true \ + --set=l2announcements.leaseDuration="300s" \ + --set=l2announcements.leaseRenewDeadline="60s" \ + --set=l2announcements.leaseRetryPeriod="10s" \ + --set=k8sClientRateLimit.qps="50" \ + --set=k8sClientRateLimit.burst="100" \ + --set=externalIPs.enabled=true \ + --set=ingressController.enabled=true \ + --set=ingressController.loadbalancerMode=dedicated \ + --set=gatewayAPI.enabled=true \ + --set=operator.replicas="1" + helm install argocd oci://ghcr.io/argoproj/argo-helm/argo-cd -n argocd --create-namespace + kubectl apply -f ./apps/apps.yaml ``` diff --git a/talconfig.yaml b/talconfig.yaml index 0cb5c24..55012dc 100644 --- a/talconfig.yaml +++ b/talconfig.yaml @@ -3,6 +3,13 @@ talosVersion: v1.10.4 kubernetesVersion: 1.33.2 endpoint: https://kube.sdg.moe:6443 allowSchedulingOnMasters: true +cniConfig: + name: none +patches: + - |- + cluster: + proxy: + disabled: true nodes: - hostname: kadan ipAddress: kube.sdg.moe