🚧 cilium ingress controller

kubernetes/apps/kube-system/cilium/app/helmrelease.yaml

@@ -4,7 +4,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
   name: &app cilium
-  namespace: kube-system
+  namespace: &ns kube-system
 spec:
   interval: 30m
   chart:
@@ -82,12 +82,12 @@ spec:
     securityContext:
       privileged: true
     tunnel: disabled
-  #   l7proxy: true
-  #   ingressController:
-  #     enabled: true
-  #     loadbalancerMode: shared
-  #     service:
-  #       loadBalancerIP: "${CLUSTER_LB_CILIUM}"
+    l7proxy: true
+    ingressController:
+      enabled: true
+      loadbalancerMode: shared
+      service:
+        loadBalancerIP: "${CLUSTER_LB_CILIUM}"
   # postRenderers:
   #   - kustomize:
   #       patchesStrategicMerge:

kubernetes/flux/vars/cluster-settings.yaml

@@ -22,6 +22,7 @@ data:
   CLUSTER_LB_MAILRISE: 192.168.169.112
   CLUSTER_LB_REDIS: 192.168.169.113
   CLUSTER_LB_FRIGATE: 192.168.169.114
+  CLUSTER_LB_CILIUM: 192.168.169.115
   LOCAL_LAN: 192.168.8.0/22
   LOCAL_LAN_OPNSENSE: 192.168.8.1
   LOCAL_LAN_TRUENAS: 192.168.9.10