This module is disabled by default.

To enable it for the bare metal machines, add the following parameter to the deckhouse ConfigMap:

cniCiliumEnabled: "true"

Parameters

  • bpfLBModestring

    eBPF LoadBalancer mode.

    Default: "Hybrid"

    Allowed values: SNAT, Hybrid, DSR

  • cleanStateboolean

    Clean all persistent state.

    Must be reverted ASAP once all components are started with fresh state.

    Default: false

  • createNodeRoutesboolean

    Create routes to Pods on other Nodes.

    All Nodes must be located in the same L2 domain.

  • debugLoggingboolean

    Enabled debug logging for Cilium components.

    Default: false

  • policyAuditModeboolean

    Do not enforce any Network Policy. Only log allowed/disallowed connections.

    Default: false

  • resourcesManagement

    cilium agent resources requests options.

    Examples:

    resourcesManagement:
      mode: VPA
      vpa:
        mode: Auto
        cpu:
          min: 50m
          max: 2
          limitRatio: 1.5
        memory:
          min: 256Mi
          max: 2Gi
          limitRatio: 1.5
    
    resourcesManagement:
      mode: Static
      static:
        requests:
          cpu: 55m
          memory: 256Mi
        limits:
          cpu: 2
          memory: 2Gi
    
    • modestring

      The mode for managing resource requests. Classical Static requests/limit or VPA.

      Default: "VPA"

      Allowed values: VPA, Static

    • staticobject

      Static resource management settings.

      • limitsobject

        Limits configuration.

        • cpu

          CPU limits.

        • memory

          Memory limits.

      • requestsobject

        Requests configuration.

        • cpu

          CPU requests.

        • memory

          Memory requests.

    • vpaobject

      Parameters of the VPA mode.

      • cpuobject

        CPU-related parameters.

        • limitRationumber

          The coefficient to calculate cpu limits. It is optionally used to calculate initial limits for Pod. VPA for its part keeps the initial limits/requests ratio during further resource tunings.

        • max

          Maximum allowed CPU requests.

          Default: 4

        • min

          Minimum allowed CPU requests.

          Default: 100m

      • memoryobject

        The amount of memory requested.

        • limitRationumber

          The coefficient to calculate memory limits. It is optionally used to calculate initial limits for Pod. VPA for its part keeps the initial limits/requests ratio during further resource tunings.

        • max

          Maximum allowed memory requests.

          Default: 4Gi

        • min

          Minimum allowed memory requests.

          Default: 512Mi

      • modestring

        The VPA usage mode.

        Default: "Initial"

        Allowed values: Initial, Auto

  • svcSourceRangeCheckboolean

    Check source IP and validate it against Service’s “loadBalancerSourceRanges”.

    Do not enable behind a load balancer that performs any form of SNAT.

    Default: false

  • tunnelModestring

    Tunnel mode.

    Default: "Disabled"

    Allowed values: Disabled, VXLAN