# ------------------------------------------------------------------------------
# Cilium Helm Values — fastpass cluster
# Chart: https://helm.cilium.io
# Version: 1.17.4
#
# Full values required — ArgoCD does not reuse previous Helm release values.
# ------------------------------------------------------------------------------

# Bootstrap values — must be repeated here
kubeProxyReplacement: true
k8sServiceHost: 10.1.71.65
k8sServicePort: 6443
ipam:
  mode: kubernetes
tunnel: vxlan

# Gateway API support
gatewayAPI:
  enabled: true

# L2 announcements — ARP-based LB IP advertisement
l2announcements:
  enabled: true

k8sClientRateLimit:
  qps: 20
  burst: 40

externalIPs:
  enabled: true

# Talos compatibility — /etc/sysctl.d/ does not exist on Talos
sysctlfix:
  enabled: false

# Hubble observability
hubble:
  enabled: true
  relay:
    enabled: true
  ui:
    enabled: true
  metrics:
    enabled:
      - dns
      - drop
      - tcp
      - flow
      - port-distribution
      - httpV2

# Prometheus metrics
prometheus:
  enabled: true
  serviceMonitor:
    enabled: false