image:
  repository: "easzlab.io.local:5000/cilium/cilium"
  tag: "v{{ cilium_ver }}"
  useDigest: false

# -- Additional agent container arguments.
{% if ENABLE_LOCAL_DNS_CACHE %}
extraArgs:
  - --exclude-local-address="{{ LOCAL_DNS_CACHE }}/32"
{% endif %}

resources:
  limits:
    cpu: 4000m
    memory: 4Gi
  requests:
    cpu: 100m
    memory: 512Mi

containerRuntime:
  integration: containerd
  socketPath: unix:///run/containerd/containerd.sock

{% if cilium_hubble_enabled %}
hubble:
  enabled: true
  relay:
    enabled: true
    image:
      repository: "easzlab.io.local:5000/cilium/hubble-relay"
      tag: "v{{ cilium_ver }}"
      useDigest: false
  ui:
{% if cilium_hubble_ui_enabled %}
    enabled: true
{% else %}
    enabled: false
{% endif %}
    backend:
      image:
        repository: "easzlab.io.local:5000/cilium/hubble-ui-backend"
        tag: "v0.11.0"
    frontend:
      image:
        repository: "easzlab.io.local:5000/cilium/hubble-ui"
        tag: "v0.11.0"
{% endif %}

identityAllocationMode: "crd"

ipam:
  # ref: https://docs.cilium.io/en/stable/concepts/networking/ipam/
  mode: "cluster-pool"
  operator:
    clusterPoolIPv4PodCIDRList: ["{{ CLUSTER_CIDR }}"]
    clusterPoolIPv4MaskSize: 24

# -- Enable Layer 7 network policy.
l7Proxy: true

# -- Configure Istio proxy options.
proxy:
  prometheus:
    enabled: false
    port: "9095"
  # -- Regular expression matching compatible Istio sidecar istio-proxy
  # container image names
  sidecarImageRegex: "cilium/istio_proxy"

# -- Configure TLS configuration in the agent.
tls:
  enabled: true
  secretsBackend: local

tunnel: "vxlan"

etcd:
  enabled: false

operator:
  enabled: true
  image:
    repository: "easzlab.io.local:5000/cilium/operator"
    tag: "v{{ cilium_ver }}"
    useDigest: false
  replicas: 1
  resources:
    limits:
      cpu: 1000m
      memory: 1Gi
    requests:
      cpu: 100m
      memory: 128Mi

preflight:
  enabled: false

clustermesh:
  useAPIServer: false