Add validation to ensure l7proxy cannot be disabled when Ingress is e…

…nabled Signed-off-by: Nick Young <nick@isovalent.com>
cilium · May 4, 2023 · ea404cf · ea404cf
1 parent 718f180
commit ea404cf
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/install/kubernetes/cilium/templates/validate.yaml b/install/kubernetes/cilium/templates/validate.yaml
@@ -46,6 +46,14 @@
   {{- end }}
 {{- end }}
 
+{{- if or .Values.ingressController.enabled .Values.gatewayAPI.enabled }}
+  {{- if hasKey .Values "l7proxy" }}
+    {{- if not .Values.l7proxy }}
+      {{ fail "Ingress or Gateway API controller requires .Values.l7proxy to be set to 'true'" }}
+    {{- end }}
+  {{- end }}
+{{- end }}
+
 {{- if or .Values.ingressController.enabled .Values.gatewayAPI.enabled }}
   {{- if hasKey .Values "kubeProxyReplacement" }}
     {{- if and (ne .Values.kubeProxyReplacement "partial") (ne .Values.kubeProxyReplacement "strict") }}