talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Update packages in kubernetes/keys.

Browse Source
This commit is contained in:
Tom Alexander
2026-03-07 20:14:07 -05:00
parent f21dd0616b
commit 552a827f77
4 changed files with 43 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
nix/kubernetes/keys/scope.nix
View File

@@ -234,7 +234,7 @@ makeScope newScope (
encryption_config = (callPackage ./package/k8s-encryption-key/package.nix additional_vars);
cilium-manifest =
let
version = "1.18.5";
version = "1.19.1";
in
(callPackage ./package/helm-manifest/package.nix (
additional_vars
@@ -243,7 +243,7 @@ makeScope newScope (
owner = "cilium";
repo = "cilium";
tag = "v${version}";
hash = "sha256-348inOOQ/fgwTYnaSHrQ363xGYnx2UPts3D4ycDRsWE=";
hash = "sha256-wswY4u2Z7Z8hvGVnLONxSD1Mu1RV1AglC4ijUHsCCW4=";
};
helm_name = "cilium";
helm_namespace = "kube-system";
@@ -262,13 +262,18 @@ makeScope newScope (
"ipv4" = {
"enabled" = true;
};
"externalIPs" = {
"enabled" = true;
};
"enableIPv6Masquerade" = false;
"enableIPv4BIGTCP" = true;
"enableIPv6BIGTCP" = true;
"routingMode" = "native";
"autoDirectNodeRoutes" = true;
"ipv4NativeRoutingCIDR" = "10.200.0.0/16";
"ipv6NativeRoutingCIDR" = "2620:11f:7001:7:ffff::/80";
"ipv6NativeRoutingCIDR" = "2620:11f:7001:7:ffff:eeee::/96";
# "ipv6NativeRoutingCIDR" = "2620:11f:7001:7:ffff::/80";
# "l7Proxy" = true; # Needed for cilium gateway controller
"hubble" = {
"relay" = {
@@ -283,7 +288,7 @@ makeScope newScope (
};
};
"policyEnforcementMode" = "never";
"policyEnforcementMode" = "never"; # This is temporary for debugging
# TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/