kubernetes/bootstrap/install-cilium.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+cilium install \
+    --helm-set=ipam.mode=kubernetes \
+    --helm-set=kubeProxyReplacement=true \
+    --helm-set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
+    --helm-set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
+    --helm-set=cgroup.autoMount.enabled=false \
+    --helm-set=cgroup.hostRoot=/sys/fs/cgroup \
+    --helm-set=k8sServiceHost=127.0.0.1 \
+    --helm-set=k8sServicePort=7445 \
+    --helm-set=bgpControlPlane.enabled=true \
+    --helm-set=bgp.enabled=false \
+    --helm-set=bgp.announce.loadbalancerIP=true \
+    --helm-set=bgp.announce.podCIDR=false
+

kubernetes/tools/wiperook.yaml

@@ -6,7 +6,7 @@ metadata:
   namespace: kube-system
 spec:
   restartPolicy: Never
-  nodeName: talos-fki-fmf
+  nodeName: talos-0ye-ep1
   containers:
     - name: disk-wipe
       image: ghcr.io/onedr0p/alpine:3.19.1@sha256:3fbc581cb0fe29830376161ae026e2a765dcc11e1747477fe9ebf155720b8638
@@ -43,7 +43,7 @@ metadata:
   namespace: kube-system
 spec:
   restartPolicy: Never
-  nodeName: talos-xuc-f2e
+  nodeName: talos-9pw-zvs
   containers:
     - name: disk-wipe
       image: ghcr.io/onedr0p/alpine:3.19.1@sha256:3fbc581cb0fe29830376161ae026e2a765dcc11e1747477fe9ebf155720b8638
@@ -80,7 +80,7 @@ metadata:
   namespace: kube-system
 spec:
   restartPolicy: Never
-  nodeName: talos-opy-6ij
+  nodeName: 
   containers:
     - name: disk-wipe
       image: ghcr.io/onedr0p/alpine:3.19.1@sha256:3fbc581cb0fe29830376161ae026e2a765dcc11e1747477fe9ebf155720b8638