add environment-specific cilium profiles

deployments/argocd/optional-apps/cilium-flatcar-k3s.yaml

@@ -0,0 +1,26 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cilium-flatcar-k3s
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "-4"
+spec:
+  project: default
+  sources:
+    - repoURL: https://helm.cilium.io/
+      chart: cilium
+      targetRevision: 1.20.0
+      helm:
+        valueFiles:
+          - $values/deployments/cilium/values/common.yaml
+          - $values/deployments/cilium/values/profiles/flatcar-k3s.yaml
+    - repoURL: https://git.swaphb.com/swaphb/kubernetes-security-baseline-lab.git
+      targetRevision: main
+      ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: kube-system
+  # Replace the control-plane endpoint in the profile before applying.
+  # Keep this Application outside the default root app-of-apps until the
+  # kube-proxy-free bootstrap is complete.