add environment-specific cilium profiles

2026-08-16 20:04:14 -04:00
parent 1a372b7eac
commit 6c79340d9a
14 changed files with 188 additions and 56 deletions
@@ -0,0 +1,14 @@
+# Dedicated VM profile.
+# Geneve tunneling is the portable default when the VM network does not have
+# explicit routes for the Kubernetes pod CIDR between nodes.
+routingMode: tunnel
+tunnelProtocol: geneve
+
+# Dedicated VMs do not need the nested-container socket-LB workaround.
+socketLB:
+  hostNamespaceOnly: false
+
+# Set these for an ArgoCD-managed installation, or override them through
+# Ansible when the control-plane address is environment-specific.
+k8sServiceHost: "REPLACE_WITH_CONTROL_PLANE_API_IP"
+k8sServicePort: 6443