rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cilium TS

Browse Source
This commit is contained in:
Ryan Blundon
2026-05-17 23:39:11 -05:00
parent 87f2d6bf95
commit 2ff74cdc7c
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
cluster/platform/cilium-config/values.yaml
View File

@@ -60,3 +60,24 @@ prometheus:
# Without this the apply-sysctl-overwrites init container fails on Talos # Without this the apply-sysctl-overwrites init container fails on Talos
sysctlfix: sysctlfix:
enabled: false enabled: false
# Talos security compatibility
# Talos restricts Linux capabilities — these settings align Cilium with Talos constraints
securityContext:
capabilities:
ciliumAgent:
- CHOWN
- KILL
- NET_ADMIN
- NET_RAW
- IPC_LOCK
- SYS_ADMIN
- SYS_RESOURCE
- DAC_OVERRIDE
- FOWNER
- SETGID
- SETUID
cleanCiliumState:
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE