Cilium

The role performs various tasks related to Helm chart deployment, reset and validation.

Role Settings

See the related role settings listed below, defined into main.yaml defaults file.

`cilium_vars.kubernetes`

Default value: null

See the related child settings, listed below.

`kubernetes.client`

Default value: null

`client.rate_limit`

Default value: null

`rate_limit.burst`

Default value: integer, 100

`rate_limit.qps`

Default value: integer, 50

`kubernetes.envoy`

Default value: null

`envoy.resources`

Default value: null

`resources.limits`

Default value: null

`limits.cpu`

Default value: string, 400m

`limits.memory`

Default value: string, 256Mi

`resources.requests`

Default value: null

`requests.cpu`

Default value: string, 100m

`requests.memory`

Default value: string, 64Mi

`kubernetes.helm`

Default value: null

`helm.chart`

Default value: null

`chart.name`

Default value: string, cilium

`chart.version`

Default value: string

Visit cilium/cilium, for latest release version.

`helm.repository`

Default value: null

`repository.name`

Default value: string, cilium

`repository.org`

Default value: string, cilium

`repository.url`

Default value: string, https://helm.cilium.io

`kubernetes.hubble`

Default value: null

`hubble.relay`

Default value: null

`relay.replicas`

Default value: integer, 2

`relay.resources`

Default value: null

`resources.limits`

Default value: null

`limits.cpu`

Default value: string, 400m

`limits.memory`

Default value: string, 256Mi

`resources.requests`

Default value: null

`requests.cpu`

Default value: string, 100m

`requests.memory`

Default value: string, 64Mi

`relay.retry_timeout`

Default value: string, 10s

`hubble.ui`

Default value: null

`ui.gateway`

Default value: null

Read the Gateway API tutorial, for more details.

`gateway.service`

Default value: string, hubble-ui

`gateway.subdomain`

Default value: string, hubble

Sets the subdomain name for Hubble UI.

`ui.infrastructure`

Default value: null

`infrastructure.annotations`

Default value: map

Sets the infrastructure annotations.

`hubble.tls`

Default value: null

`tls.auto`

Default value: null

`auto.method`

Default value: string, certmanager

`tls.certificate`

Default value: null

`certificate.common`

Default value: null

`common.name`

Default value: string, hubble-tls-certificate

`certificate.root`

Default value: null

`root.name`

Default value: string, hubble-tls-root-certificate

`tls.cluster_issuer`

Default value: null

`cluster_issuer.name`

Default value: string, hubble-cluster-issuer

`kubernetes.ingress`

Default value: null

`ingress.controller`

Default value: null

`controller.service`

Default value: null

`service.loadbalancer`

Default value: null

`loadbalancer.ip`

Default value: string, 192.168.4.17

`kubernetes.ipam`

Default value: null

`ipam.operator`

Default value: null

`operator.cluster_pool`

Default value: string, 10.42.0.0/16

`kubernetes.loadbalancer`

Default value: null

`loadbalancer.algorithm`

Default value: string, disabled

`loadbalancer.ip_pool`

Default value: string, 192.168.4.16/28

`loadbalancer.table_size`

Default value: integer, 16381

`kubernetes.namespace`

Default value: string, kube-system

`kubernetes.operator`

Default value: null

`operator.resources`

Default value: null

`resources.limits`

Default value: null

`limits.cpu`

Default value: string, 400m

`limits.memory`

Default value: string, 256Mi

`resources.requests`

Default value: null

`requests.cpu`

Default value: string, 100m

`requests.memory`

Default value: string, 64Mi

`kubernetes.routing_mode`

Default value: string, native

`cilium_vars.release`

Default value: null

See the related child settings, listed below.

`release.cli`

Default value: null

Release details for cilium-cli binary.

`cli.file`

Default value: string, cilium-linux-arm64.tar.gz

`cli.repository`

Default value: null

`repository.name`

Default value: string, cilium-cli

`repository.org`

Default value: string, cilium

`cli.version`

Default value: string

Visit cilium/cilium-cli, for latest release version.

`release.gateway_api`

Default value: null

Release details for gateway-api manifest.

`gateway_api.file`

Default value: string, experimental-install.yaml

`gateway_api.repository`

Default value: null

`repository.name`

Default value: string, gateway-api

`repository.org`

Default value: string, kubernetes-sigs

`gateway_api.version`

Default value: string

Visit kubernetes-sigs/gateway-api, for latest release version.

`release.hubble`

Default value: null

Release details for hubble binary.

`hubble.file`

Default value: string, hubble-linux-arm64.tar.gz

`hubble.repository`

Default value: null

`repository.name`

Default value: string, hubble

`repository.org`

Default value: string, cilium

`hubble.version`

Default value: string

Visit cilium/hubble, for latest release version.

Role Tasks

See the related role tasks, listed below.

Facts

Ansible facts, see facts.yaml for details.

Main

Main role related tasks, see main.yaml for details.

Reset

Reset related tasks, see reset.yaml for details.

Update

Update related tasks, see validation.yaml for details.

Validation

Validation related tasks, see validation.yaml for details.

Role Templates

See the related role templates, listed below.

Helm Chart

Helm chart values template, see values.j2 for details.

Certificate

Kubernetes Certificate template, see certificate.j2 for details.

Cluster Issuer

Kubernetes ClusterIssuer template, see cluster_issuer.j2 for details.

Gateway

Kubernetes Gateway template, see gateway.j2 for details.

HTTP Route

Insecure Route

Kubernetes HTTPRoute template, see http_route.j2 for details.

Secure Route

Kubernetes HTTPRoute template, see https_route.j2 for details.

L2 Announcement Policy

Kubernetes CiliumL2AnnouncementPolicy template, see l2_announcement_policy.j2 for details.

Load Balancer

Kubernetes Service template, see loadbalancer.j2 for details.

Load Balancer IP Pool

Kubernetes CiliumLoadBalancerIPPool template, see loadbalancer_ip_pool.j2 for details.

CertManager Cloudflare