Skip to content

Commit

Permalink
Set Helm value bgpControlPlane.secretNamespace.name
Browse files Browse the repository at this point in the history
This should ensure that the RBAC workaround for the BGP control plane
peering secrets isn't necessary for Cilium >= 1.15
  • Loading branch information
simu committed Jun 20, 2024
1 parent c76953b commit 76af66a
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 0 deletions.
8 changes: 8 additions & 0 deletions class/defaults.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,14 @@ parameters:
"False": true

cilium_helm_values:
bgpControlPlane:
secretNamespace:
# Ensure that Cilium's BGP control plane is configured to look for
# peering secrets in the same namespace where Cilium is installed.
# Without this, it's not possible to enable the BGP control plane
# when installing Cilium with OLM without patching the OLM RBAC.
# See also https://github.com/projectsyn/component-cilium/pull/117.
name: ${cilium:_namespace}
cni:
binPath: /var/lib/cni/bin
confPath: /var/run/multus/cni/net.d
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,9 @@ metadata:
name: cilium
namespace: cilium
spec:
bgpControlPlane:
secretNamespace:
name: cilium
bpf:
masquerade: false
cni:
Expand Down

0 comments on commit 76af66a

Please sign in to comment.