From f4b6a46e8ea2f444d93bae40cb062c494f738aac Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Sat, 18 Dec 2021 18:17:36 +0100
Subject: [PATCH] Add: core/cilium

---
 projects/core/project.yml        |  6 +++++
 projects/core/values/cilium.yaml | 38 ++++++++++++++++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 projects/core/values/cilium.yaml

diff --git a/projects/core/project.yml b/projects/core/project.yml
index 96c17d19..f421856f 100644
--- a/projects/core/project.yml
+++ b/projects/core/project.yml
@@ -55,3 +55,9 @@ apps:
   chart: ingress-nginx
   targetRevision: 4.0.13
   syncWave: '0'
+
+- name: cilium
+  existingNamespace: kube-system
+  repoURL: https://helm.cilium.io
+  chart: cilium
+  targetRevision: 1.11.0
diff --git a/projects/core/values/cilium.yaml b/projects/core/values/cilium.yaml
new file mode 100644
index 00000000..587c774e
--- /dev/null
+++ b/projects/core/values/cilium.yaml
@@ -0,0 +1,38 @@
+---
+hubble:
+  relay:
+    enabled: true
+
+  ui:
+    enabled: true
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: vault-issuer
+      hosts:
+        - cilium.dc
+      tls:
+      - secretName: cilium-dc-tls
+        hosts:
+        - cilium.dc
+
+  metrics:
+    enabled:
+    - dns:query;ignoreAAAA
+    - drop
+    - tcp
+    - flow
+    - icmp
+    - http
+    annotations:
+      prometheus.io/scrape: "true"
+      prometheus.io/port: "9091"
+
+prometheus:
+  enabled: true
+
+operator:
+  replicas: 1
+
+hostServices:
+  enabled: true