add environment-specific cilium profiles

ansible/roles/cilium_bootstrap/defaults/main.yml

@@ -2,7 +2,9 @@
 cilium_enabled: false
 cilium_namespace: kube-system
 cilium_chart_version: 1.20.0
-cilium_values_file: "{{ k3d_workspace }}/deployments/cilium/cilium-values.yaml"
+cilium_profile: k3d
+cilium_common_values_file: "{{ k3d_workspace }}/deployments/cilium/values/common.yaml"
+cilium_profile_values_file: "{{ k3d_workspace }}/deployments/cilium/values/profiles/{{ cilium_profile }}.yaml"
 cilium_k8s_service_host: ""
 # k3d publishes the API on a dynamically allocated host port. A value of zero
 # makes the role derive that port from the kubeconfig created by k3d.

ansible/roles/cilium_bootstrap/tasks/main.yml

@@ -19,6 +19,12 @@
       - cilium_k8s_service_port | int > 0
     fail_msg: Set cilium_k8s_service_host and cilium_k8s_service_port for kube-proxy replacement.
 
+- name: Require a supported Cilium profile
+  ansible.builtin.assert:
+    that:
+      - cilium_profile in ['k3d', 'flatcar-k3s']
+    fail_msg: cilium_profile must be k3d or flatcar-k3s.
+
 - name: Verify kube-proxy is disabled
   ansible.builtin.raw: "{{ k3d_tool_dir }}/kubectl -n kube-system get daemonset kube-proxy"
   become_user: "{{ k3d_user }}"
@@ -47,7 +53,8 @@
     {{ k3d_tool_dir }}/helm upgrade --install cilium cilium/cilium
     --namespace {{ cilium_namespace }}
     --version {{ cilium_chart_version }}
-    --values {{ cilium_values_file }}
+    --values {{ cilium_common_values_file }}
+    --values {{ cilium_profile_values_file }}
     --set kubeProxyReplacement=true
     --set k8sServiceHost={{ cilium_k8s_service_host }}
     --set k8sServicePort={{ cilium_k8s_service_port }}