agent: true

cni:
  install: true

ipam:
  mode: "cluster-pool"

ingressController:
  enabled: false

encryption:
  enabled: false

hostPort:
  enabled: false

socketLB:
  enabled: false

hubble:
  enabled: true

  metrics:
    enabled:
    - dns:query;ignoreAAAA
    - drop
    - tcp
    - flow
    - icmp
    - http

  relay:
    enabled: true

    # -- Hubble-relay container image.
    image:
      pullPolicy: "IfNotPresent"

    # -- Number of replicas run for the hubble-relay deployment.
    replicas: 1

  ui:
    enabled: true
    standalone:
      enabled: false
    replicas: 1

    ingress:
      enabled: true
      className: ingress-internal
      annotations:
        cert-manager.io/cluster-issuer: vault-issuer
      hosts:
        - cilium.dc
      tls:
      - secretName: cilium-dc-tls
        hosts:
        - cilium.dc

ipv4:
  enabled: true

ipv6:
  enabled: false

kubeProxyReplacement: strict
l2NeighDiscovery:
  enabled: false
  refreshPeriod: "30s"
l7Proxy: true

enableIPv4Masquerade: true
enableIPv6Masquerade: true

prometheus:
  enabled: true
  serviceMonitor:
    enabled: true

operator:
  enabled: true
  replicas: 1

  prometheus:
    enabled: false
    serviceMonitor:
      enabled: false

preflight:
  enabled: false