Documentation
Guide
Configuration
Roles
Cilium

Cilium

The role performs various tasks related to Helm chart deployment, reset and validation.

Role Settings

See the related role settings listed below, defined into main.yaml defaults file.

cilium_vars.kubernetes

  • Default value: null

See the related child settings, listed below.

kubernetes.client

  • Default value: null
client.rate_limit
  • Default value: null
rate_limit.burst
  • Default value: integer, 100
rate_limit.qps
  • Default value: integer, 50

kubernetes.envoy

  • Default value: null
envoy.resources
  • Default value: null
resources.limits
  • Default value: null
limits.cpu
  • Default value: string, 400m
limits.memory
  • Default value: string, 256Mi
resources.requests
  • Default value: null
requests.cpu
  • Default value: string, 100m
requests.memory
  • Default value: string, 64Mi

kubernetes.helm

  • Default value: null
helm.chart
  • Default value: null
chart.name
  • Default value: string, cilium
chart.version
  • Default value: string

Visit cilium/cilium, for latest release version.

helm.repository
  • Default value: null
repository.name
  • Default value: string, cilium
repository.org
  • Default value: string, cilium
repository.url
  • Default value: string, https://helm.cilium.io

kubernetes.hubble

  • Default value: null
hubble.relay
  • Default value: null
relay.replicas
  • Default value: integer, 2
relay.resources
  • Default value: null
resources.limits
  • Default value: null
limits.cpu
  • Default value: string, 400m
limits.memory
  • Default value: string, 256Mi
resources.requests
  • Default value: null
requests.cpu
  • Default value: string, 100m
requests.memory
  • Default value: string, 64Mi
relay.retry_timeout
  • Default value: string, 10s
hubble.ui
  • Default value: null
ui.gateway
  • Default value: null

Read the Gateway API tutorial, for more details.

gateway.service
  • Default value: string, hubble-ui
gateway.subdomain
  • Default value: string, hubble

Sets the subdomain name for Hubble UI.

ui.infrastructure
  • Default value: null
infrastructure.annotations
  • Default value: map

Sets the infrastructure annotations.

ui.replicas
  • Default value: integer, 2
ui.resources
  • Default value: null
resources.limits
  • Default value: null
limits.cpu
  • Default value: string, 400m
limits.memory
  • Default value: string, 256Mi
resources.requests
  • Default value: null
requests.cpu
  • Default value: string, 100m
requests.memory
  • Default value: string, 64Mi
hubble.tls
  • Default value: null
tls.auto
  • Default value: null
auto.method
  • Default value: string, certmanager, optional cronJob or helm
tls.certificate
  • Default value: null
certificate.common
  • Default value: null
common.name
  • Default value: string, hubble-common-certs
certificate.root
  • Default value: null
root.name
  • Default value: string, hubble-root-certs
tls.cluster_issuer
  • Default value: null
cluster_issuer.name
  • Default value: string, hubble-cluster-issuer

kubernetes.ingress

  • Default value: null
ingress.controller
  • Default value: null
controller.service
  • Default value: null
service.loadbalancer
  • Default value: null
loadbalancer.ip
  • Default value: string, 192.168.4.17

kubernetes.ipam

  • Default value: null
ipam.operator
  • Default value: null
operator.cluster_pool
  • Default value: string, 10.42.0.0/16

kubernetes.loadbalancer

  • Default value: null
loadbalancer.algorithm
  • Default value: string, maglev, optional random

Refer to the Cilium documentation, for more details.

loadbalancer.ip_pool
  • Default value: string, 192.168.4.16/28

Refer to the Cilium documentation, for more details.

loadbalancer.table_size
  • Default value: integer, 16381

kubernetes.namespace

  • Default value: string, kube-system

kubernetes.operator

  • Default value: null
operator.resources
  • Default value: null
resources.limits
  • Default value: null
limits.cpu
  • Default value: string, 400m
limits.memory
  • Default value: string, 256Mi
resources.requests
  • Default value: null
requests.cpu
  • Default value: string, 100m
requests.memory
  • Default value: string, 64Mi

kubernetes.routing_mode

  • Default value: string, native, optional tunnel

cilium_vars.release

  • Default value: null

See the related child settings, listed below.

release.cli

  • Default value: null

Release details for cilium-cli binary.

cli.file
  • Default value: string, cilium-linux-arm64.tar.gz
cli.repository
  • Default value: null
repository.name
  • Default value: string, cilium-cli
repository.org
  • Default value: string, cilium
cli.version
  • Default value: string

Visit cilium/cilium-cli, for latest release version.

release.gateway_api

  • Default value: null

Release details for gateway-api manifest.

gateway_api.file
  • Default value: string, experimental-install.yaml
gateway_api.repository
  • Default value: null
repository.name
  • Default value: string, gateway-api
repository.org
  • Default value: string, kubernetes-sigs
gateway_api.version
  • Default value: string

Visit kubernetes-sigs/gateway-api, for latest release version.

release.hubble

  • Default value: null

Release details for hubble binary.

hubble.file
  • Default value: string, hubble-linux-arm64.tar.gz
hubble.repository
  • Default value: null
repository.name
  • Default value: string, hubble
repository.org
  • Default value: string, cilium
hubble.version
  • Default value: string

Visit cilium/hubble, for latest release version.

Role Tasks

See the related role tasks, listed below.

Facts

Ansible facts, see facts.yaml for details.

Main

Main role related tasks, see main.yaml for details.

Reset

Reset related tasks, see reset.yaml for details.

Update

Update related tasks, see validation.yaml for details.

Validation

Validation related tasks, see validation.yaml for details.

Role Templates

See the related role templates, listed below.

Helm Chart

Helm chart values template, see values.j2 for details.

Certificate

Kubernetes Certificate resource template, see certificate.j2 for details.

Cluster Issuer

Kubernetes ClusterIssuer resource template, see cluster_issuer.j2 for details.

Gateway

Kubernetes Gateway resource template, see gateway.j2 for details.

HTTP Route

Insecure Route

Kubernetes HTTPRoute resource template, see http_route.j2 for details.

Secure Route

Kubernetes HTTPRoute resource template, see https_route.j2 for details.

L2 Announcement Policy

Kubernetes CiliumL2AnnouncementPolicy resource template, see l2_announcement_policy.j2 for details.

Load Balancer

Kubernetes Service resource template, see loadbalancer.j2 for details.

Load Balancer IP Pool

Kubernetes CiliumLoadBalancerIPPool resource template, see loadbalancer_ip_pool.j2 for details.

RolesCloudflare