Add: core/cilium

projects/core/project.yml

@@ -55,3 +55,9 @@ apps:
   chart: ingress-nginx
   targetRevision: 4.0.13
   syncWave: '0'
+
+- name: cilium
+  existingNamespace: kube-system
+  repoURL: https://helm.cilium.io
+  chart: cilium
+  targetRevision: 1.11.0

projects/core/values/cilium.yaml

@@ -0,0 +1,38 @@
+---
+hubble:
+  relay:
+    enabled: true
+
+  ui:
+    enabled: true
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: vault-issuer
+      hosts:
+        - cilium.dc
+      tls:
+      - secretName: cilium-dc-tls
+        hosts:
+        - cilium.dc
+
+  metrics:
+    enabled:
+    - dns:query;ignoreAAAA
+    - drop
+    - tcp
+    - flow
+    - icmp
+    - http
+    annotations:
+      prometheus.io/scrape: "true"
+      prometheus.io/port: "9091"
+
+prometheus:
+  enabled: true
+
+operator:
+  replicas: 1
+
+hostServices:
+  enabled: true