cilium: add to draft

Signed-off-by: Victor Login <batazor@evrone.com>

ops/Helm/addons/cilium/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: cilium
+  repository: https://helm.cilium.io/
+  version: 1.13.0
+digest: sha256:9f5db27343360b8a4e65329dbfb17eec601c5aa7bef2e00f34b3cf6645c5efef
+generated: "2023-03-08T17:02:03.311821+01:00"

ops/Helm/addons/cilium/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2                                   # The chart API version (required)
+appVersion: "1.0.0"                              # The version of the app that this contains (optional)
+name: cilium                                  # The name of the chart (required)
+version: 0.1.0                                   # A SemVer 2 version (required)
+kubeVersion: ">= 1.22.0 || >= v1.22.0-0"         # A SemVer range of compatible Kubernetes versions (optional)
+keywords:                                        # A list of keywords about this project (optional)
+  - networking
+maintainers:
+  - email: batazor111@gmail.com
+    name: batazor
+    url: batazor.ru
+engine: gotpl
+type: application                                # It is the type of chart (optional)
+deprecated: false                                # Whether this chart is deprecated (optional, boolean)
+dependencies:
+  - name: cilium
+    version: 1.13.0
+    repository: https://helm.cilium.io/
+    condition: cilium.enabled
+    tags:
+      - networking

ops/Helm/addons/cilium/templates/NOTES.txt

@@ -0,0 +1,5 @@
+CHART NAME: {{ .Chart.Name }}
+CHART VERSION: {{ .Chart.Version }}
+APP VERSION: {{ .Chart.AppVersion }}
+
+** Please be patient while the chart is being deployed **

ops/Helm/addons/cilium/values.yaml

@@ -0,0 +1,38 @@
+cilium:
+  enabled: true
+
+  kubeProxyReplacement: strict
+  k8sServiceHost: 127.0.0.1
+  k8sServicePort: 6443
+
+  autoDirectNodeRoutes: true
+  annotateK8sNode: false
+
+  containerRuntime:
+    integration: auto
+
+  enableCiliumEndpointSlice: true
+
+  hubble:
+    listenAddress: ":4244"
+
+    metrics:
+      enabled:
+        - dns
+        - tcp
+        - flow
+        - dns
+        - drop
+        - icmp
+        - http
+        - port-distribution
+
+      enableOpenMetrics: true
+      serviceMonitor:
+        enabled: true
+
+    relay:
+      enabled: true
+
+    ui:
+      enabled: true

ops/argocd/draft/cilium/application.yaml

@@ -0,0 +1,40 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cilium
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: shortlink
+  destination:
+    name: ''
+    namespace: idp
+    server: 'https://kubernetes.default.svc'
+  source:
+    path: ops/Helm/addons/cilium
+    repoURL: 'https://github.com/shortlink-org/shortlink'
+    targetRevision: HEAD
+    helm:
+      releaseName: cilium
+      valueFiles:
+        - values.yaml
+  syncPolicy:
+    automated:
+      prune: true
+      allowEmpty: true
+      selfHeal: false
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
+    retry:
+      limit: 2
+      backoff:
+        duration: 10s
+        maxDuration: 3m0s
+        factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))