/
values.yaml
49 lines (38 loc) · 1.61 KB
/
values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
# ipam is the IPAM mode to use.
#
# Possible values:
# - cluster-pool
# - kubernetes
# - eni
# - azure
# - crd
#ipam: "cluster-pool"
# identityChangeGracePeriod is the grace period that needs to pass
# before an endpoint that has changed its identity will start using
# that new identity. During the grace period, the new identity has
# already been allocated and other nodes in the cluster have a chance
# to whitelist the new upcoming identity of the endpoint.
#identityChangeGracePeriod: "5s"
#enableCnpStatusUpdates: false
# bpfMapDynamicSizeRatio is the ratio (0.0-1.0) of total system memory to use
# for dynamic sizing of CT, NAT, neighbor and SockRevNAT BPF maps. If set to
# 0.0, dynamic sizing of BPF maps is disabled. The default value of 0.0025
# (0.25%) leads to approximately the default CT size kube-proxy sets on a
# node with 16 GiB of total system memory.
#bpfMapDynamicSizeRatio: 0.0025
# bpfMasquerade enables masquerading with BPF instead of iptables
#bpfMasquerade: true
# bpfClockProbe enables the probing and potential of a more efficient clock
# source for the BPF datapath
#bpfClockProbe: true
# blacklistConflictingRoutes instructs the cilium-agent whether to blacklist
# IP allocations conflicting with local non-cilium routes.
#blacklistConflictingRoutes: true
# sessionAffinity enable support for service sessionAffinity
#sessionAffinity: true
#healthChecking: true
#synchronizeK8sNodes: true
# enables non-drop mode for installed policies. In audit mode
# packets affected by policies will not be dropped. Policy related
# decisions can be checked via the poicy verdict messages.
#policyAuditMode: false