ipam:
  mode: kubernetes
kubeProxyReplacement: true

securityContext:
  capabilities:
    ciliumAgent:
      - CHOWN
      - KILL
      - NET_ADMIN
      - NET_RAW
      - IPC_LOCK
      - SYS_ADMIN
      - SYS_RESOURCE
      - DAC_OVERRIDE
      - FOWNER
      - SETGID
      - SETUID
    cleanCiliumState: [NET_ADMIN,SYS_ADMIN,SYS_RESOURCE]

cgroup:
  autoMount:
    enabled: false
  hostRoot: /sys/fs/cgroup

k8sServiceHost: localhost
k8sServicePort: 7445

bpf:
  masquerade: true

l2announcements:
  enabled: true
  leaseDuration: 300s
  leaseRenewDeadline: 60s
  leaseRetryPeriod: 10s

k8sClientRateLimit:
  qps: 50
  burst: 100

externalIPs:
  enabled: true

ingressController:
  enabled: true
  default: true
  loadbalancerMode: shared
  service:
    annotations:
      lbipam.cilium.io/ips: 192.168.0.201
      

gatewayAPI:
  enabled: true
operator:
  replicas: 1