From 1e441098f7e2b459932086e9e099477aac3463e9 Mon Sep 17 00:00:00 2001
From: Toboshii Nakama <63410334+toboshii@users.noreply.github.com>
Date: Fri, 29 Jul 2022 11:47:17 -0500
Subject: [PATCH] fix(cilium): Update to 1.12.0

---
 .../apps/kube-system/cilium/helm-release.yaml |  7 +--
 talos/cni/install.yaml                        | 21 +++++----
 talos/cni/values.yaml                         | 34 +++++++++-----
 talos/talconfig.yaml                          |  4 +-
 talos/talenv.sops.yaml                        | 44 +++++++++----------
 5 files changed, 63 insertions(+), 47 deletions(-)

diff --git a/cluster/apps/kube-system/cilium/helm-release.yaml b/cluster/apps/kube-system/cilium/helm-release.yaml
index 0b6f39ba..66a93a58 100644
--- a/cluster/apps/kube-system/cilium/helm-release.yaml
+++ b/cluster/apps/kube-system/cilium/helm-release.yaml
@@ -13,9 +13,8 @@ spec:
   interval: 15m
   chart:
     spec:
-      # renovate: registryUrl=https://helm.cilium.io
       chart: cilium
-      version: 1.11.6
+      version: 1.12.0
       sourceRef:
         kind: HelmRepository
         name: cilium-charts
@@ -39,7 +38,7 @@ spec:
     kubeProxyReplacement: "strict"
     kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
     ipv4NativeRoutingCIDR: ${NETWORK_K8S_CLUSTER_CIDR}
-    k8sServiceHost: "${CONTROL_PLANE_ENDPOINT}"
+    k8sServiceHost: 10.75.40.10
     k8sServicePort: 6443
     loadBalancer:
       algorithm: "maglev"
@@ -54,6 +53,8 @@ spec:
       rollOutPods: true
     containerRuntime:
       integration: containerd
+    securityContext:
+      privileged: true
     hubble:
       enabled: true
       serviceMonitor:
diff --git a/talos/cni/install.yaml b/talos/cni/install.yaml
index 34f40ce8..f6c498f3 100644
--- a/talos/cni/install.yaml
+++ b/talos/cni/install.yaml
@@ -242,15 +242,17 @@ data:
   agent-not-ready-taint-key: node.cilium.io/agent-not-ready
   annotate-k8s-node: "true"
   arping-refresh-period: 30s
-  auto-direct-node-routes: "false"
+  auto-direct-node-routes: "true"
+  bpf-lb-algorithm: maglev
   bpf-lb-external-clusterip: "false"
   bpf-lb-map-max: "65536"
+  bpf-lb-mode: dsr
   bpf-map-dynamic-size-ratio: "0.0025"
   bpf-policy-map-max: "16384"
   cgroup-root: /run/cilium/cgroupv2
   cilium-endpoint-gc-interval: 5m0s
-  cluster-id: ""
-  cluster-name: default
+  cluster-id: "1"
+  cluster-name: cluster01
   custom-cni-conf: "false"
   debug: "false"
   disable-cnp-status-updates: "true"
@@ -259,6 +261,7 @@ data:
   enable-bandwidth-manager: "false"
   enable-bpf-clock-probe: "true"
   enable-endpoint-health-checking: "true"
+  enable-endpoint-routes: "true"
   enable-health-check-nodeport: "true"
   enable-health-checking: "true"
   enable-ipv4: "true"
@@ -268,7 +271,7 @@ data:
   enable-k8s-terminating-endpoint: "true"
   enable-l2-neigh-discovery: "true"
   enable-l7-proxy: "true"
-  enable-local-redirect-policy: "false"
+  enable-local-redirect-policy: "true"
   enable-policy: default
   enable-remote-node-identity: "true"
   enable-session-affinity: "true"
@@ -280,7 +283,7 @@ data:
   ipam: kubernetes
   ipv4-native-routing-cidr: 172.22.0.0/16
   kube-proxy-replacement: strict
-  kube-proxy-replacement-healthz-bind-address: ""
+  kube-proxy-replacement-healthz-bind-address: 0.0.0.0:10256
   monitor-aggregation: medium
   monitor-aggregation-flags: all
   monitor-aggregation-interval: 5s
@@ -330,6 +333,7 @@ spec:
   template:
     metadata:
       annotations:
+        cilium.io/cilium-configmap-checksum: bfa52dc85e13bebac352d2556de22d1a0945f1e9a627897a6cf7361aeedf1559
         meta.helm.sh/release-name: cilium
         meta.helm.sh/release-namespace: kube-system
       labels:
@@ -371,7 +375,7 @@ spec:
               name: cilium-config
               optional: true
         - name: KUBERNETES_SERVICE_HOST
-          value: cluster01.dfw.56k.sh
+          value: 10.75.40.10
         - name: KUBERNETES_SERVICE_PORT
           value: "6443"
         image: quay.io/cilium/operator-generic:v1.11.6@sha256:9f6063c7bcaede801a39315ec7c166309f6a6783e98665f6693939cf1701bc17
@@ -421,6 +425,7 @@ spec:
   template:
     metadata:
       annotations:
+        cilium.io/cilium-configmap-checksum: bfa52dc85e13bebac352d2556de22d1a0945f1e9a627897a6cf7361aeedf1559
         meta.helm.sh/release-name: cilium
         meta.helm.sh/release-namespace: kube-system
       labels:
@@ -481,7 +486,7 @@ spec:
               name: cilium-config
               optional: true
         - name: KUBERNETES_SERVICE_HOST
-          value: cluster01.dfw.56k.sh
+          value: 10.75.40.10
         - name: KUBERNETES_SERVICE_PORT
           value: "6443"
         image: quay.io/cilium/cilium:v1.11.6@sha256:f7f93c26739b6641a3fa3d76b1e1605b15989f25d06625260099e01c8243f54c
@@ -599,7 +604,7 @@ spec:
               name: cilium-config
               optional: true
         - name: KUBERNETES_SERVICE_HOST
-          value: cluster01.dfw.56k.sh
+          value: 10.75.40.10
         - name: KUBERNETES_SERVICE_PORT
           value: "6443"
         image: quay.io/cilium/cilium:v1.11.6@sha256:f7f93c26739b6641a3fa3d76b1e1605b15989f25d06625260099e01c8243f54c
diff --git a/talos/cni/values.yaml b/talos/cni/values.yaml
index be81400c..07a58b34 100644
--- a/talos/cni/values.yaml
+++ b/talos/cni/values.yaml
@@ -1,20 +1,32 @@
 ---
+cluster:
+  name: "cluster01"
+  id: "1"
+rollOutCiliumPods: true
+localRedirectPolicy: true
 kubeProxyReplacement: "strict"
-
-k8sServiceHost: cluster01.dfw.56k.sh
-k8sServicePort: 6443
-
+kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
 ipv4NativeRoutingCIDR: 172.22.0.0/16
+k8sServiceHost: 10.75.40.10
+k8sServicePort: 6443
+loadBalancer:
+  algorithm: "maglev"
+  mode: "dsr"
 tunnel: "disabled"
-auto-direct-node-routes: true
-
+autoDirectNodeRoutes: true
+endpointRoutes:
+  enabled: true
 ipam:
   mode: "kubernetes"
-
+operator:
+  rollOutPods: true
+containerRuntime:
+  integration: containerd
+securityContext:
+  privileged: true
+hubble:
+  enabled: false
 bgp:
   enabled: false
   announce:
-    loadbalancerIP: true
-
-hubble:
-  enabled: false
+    loadbalancerIP: true
\ No newline at end of file
diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml
index c9543052..45d9f6c2 100644
--- a/talos/talconfig.yaml
+++ b/talos/talconfig.yaml
@@ -8,9 +8,7 @@ clusterPodNets:
 clusterSvcNets:
   - 172.24.0.0/16
 cniConfig:
-  name: custom
-  urls:
-    - https://raw.githubusercontent.com/toboshii/home-ops/main/talos/cni/install.yaml
+  name: none
 nodes:
   - hostname: k8s-control01.${domainName}
     ipAddress: 10.75.40.20
diff --git a/talos/talenv.sops.yaml b/talos/talenv.sops.yaml
index d190dedf..90e19750 100644
--- a/talos/talenv.sops.yaml
+++ b/talos/talenv.sops.yaml
@@ -1,18 +1,18 @@
-aescbcEncryptionKey: ENC[]
-clusterCert: ENC[]
-clusterCertKey: ENC[]
-clusterSecret: ENC[]
-clusterToken: ENC[]
-etcdCert: ENC[]
-etcdCertKey: ENC[]
-k8sAggregatorCert: ENC[]
-k8sAggregatorCertKey: ENC[]
-k8sServiceAccountKey: ENC[]
-machineCert: ENC[]
-machineCertKey: ENC[]
-machineToken: ENC[]
-domainName: ENC[]
-clusterEndpointIP: ENC[]
+aescbcEncryptionKey: ENC[AES256_GCM,data:aacWL/jqCdtbDNdspYW2CgoyZbaDZvREG8Cl1W6yxVV/OEuRribyPTO/26c=,iv:paTXDcmuwkwHLXTwTjdYs0MgRkpmzBbXFRWck0j78Rc=,tag:QV1moSeTRt8O5tFgjHRX8g==,type:str]
+clusterCert: ENC[AES256_GCM,data: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,iv:QiBfd5ZlPduDTzHpPVOu8cMwbwm5s95fWcmYBVVJXWA=,tag:DS5tRUjPq74FDs1G676Sdw==,type:str]
+clusterCertKey: ENC[AES256_GCM,data:wR94n1zZeDbYC9xFnH2TNVPPcRVhMFuoYrZYK4YExXMq3uODGP4sG5t0e5aLKD9lYv7dMnQZvIW9Hq3VRSGDQ3gbAVEXYn3WTSp+GIdoExjogtEryQkK93ZnEN+5j0lDJaa7MupYDgLxDhTH7njSDIwpG0ZP93arMuoy4i+mMwaDxBU1ypob9NLNkDaGc7VBrGV/mRAMLhb8BNhwINEmwBcqhUuAHbTD9L3+dVxNjCc9SeyZtpQScEP5szNAYzH4ay0TiWUSN+4e3OecnygvbyyWIB0BjPA49FuZZuquqKRs+h1aB6aPK36ugFaSlOJyqQ2RTcGpIlLry5Rvyim2NyqhHIMKdRnrEVRAWVkqE9xLTTlJBbGwFxQS5JaV2AIUeA1hDRmA0O70BflC+DMZYg==,iv:OvnpgDZknH0YvC21ahlbEH9sOJEBt+ZQTGTJAJwxaKM=,tag:nU+wDhnKo1mT00RLrCSHcA==,type:str]
+clusterSecret: ENC[AES256_GCM,data:4dCxhdoI/V9Afa0eqSmELKcmaoZyVEMcvmYJKvzL2mVRd5oPAZQa8LpXW54=,iv:8mmJLl6odjJ1jCyyUVtV6kRsePzaI9/Zd992TCVhlR4=,tag:gGkd9c031K12/0R5EpG6eQ==,type:str]
+clusterToken: ENC[AES256_GCM,data:ZmyF9RQPLPozFJoMwSAcLpYLg+xY/vM=,iv:PlfOXnDvQUHj1w1aONDCer3yovtSPDv3gv1L08uYdH0=,tag:BrFevsllI30qWMghnh5w3Q==,type:str]
+etcdCert: ENC[AES256_GCM,data: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,iv:hohb9xgCR/IIVIXpb3Q3BOy68J5FOB2fK5XCSZ8rDEI=,tag:I/NGAqDItCktMHBtZoSogw==,type:str]
+etcdCertKey: ENC[AES256_GCM,data:Qgy8g19s5IlyEFI79tenQRb7Y8U8Q/8abRsa4dlEZzgi4Di9Ud04kg88KRRhL+0bTjRZtsGT6O5XgDcZ1xborCNW40KMMkbX0drOLDGUGD9sTuGNwmXON3hA0vY2unMy13R4UZzbt7hDW3+tsMYwQFNO7Fc1UmjypBoiH9QRGkwLt+UKzQq7kXhIFqlX8wBi0tVl0EZHc2GU5sLGT164Y6pPokU5QvVO4zUgNzDtwufyvZSliPNTVDLKuWKPkOPhBKiyR6+WGsraSN8tzR2pMWoEcPpN2/1XJ3GtL2PNTYSMmXlFVjb5boJ+EiWcGUMApR/i/cMjzcAP24TWVxsjEvHawS8+7Qa8uB5iuzpJKosgAea3tSFujCI7MDCI7WxzxboX8aqtwzOH06BtENS8cg==,iv:EjmnRAZ0kjeg29mAosClXA++24K0czkJZDFGi7bRL3Q=,tag:DGSfUB4ckHDM7DDuF4Ovsg==,type:str]
+k8sAggregatorCert: ENC[AES256_GCM,data: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,iv:PFa+cnpQne0OWOUG48+DJvOQge/ptylKdGT6Qmewgdw=,tag:vNmHsXCV9age9unGXIcVaw==,type:str]
+k8sAggregatorCertKey: ENC[AES256_GCM,data:PcHND+gQNte77GIOJKMAro2hDUzK9v14e4NYWvgNI7yuidzqepby2BEtqUX+wkJOI9XGT1doUSv7tG7iAzoSS2r48lmEucEeaD1AxZkUXp8n6WYmKhoTLgwOuyJYxgfEDGdkJ5LIKJeyO4WH3+Ju6f5FywyjoLnmyvCjGNGGC/wGq8I5gkbKH4poFQYMwfP/oWp/XhB2fOGod1qKkv+UeGoPDs2UXIlNO/qq31uosNMhR14RewIqawtkji1jw1M8ebCUBQlodnuZnEuezds1MwOqkAuQTbPaE2yoDxMIFGVmZR/k2zHb3o+3kHrMfcwi+jjBUN/Ffy7OPORIKAcXKnSlztWNNt8e5nidZRezYKjZ9KbkSTV1xeJe8L/UedAHS9AlWfgJCasE8mu0huUjBw==,iv:NtiAfKyCm8JvFGawHJoWUY3MVFsgFmoJXRdyKyq6p0g=,tag:oWRDFNiYU0wVsRoyzuLl7Q==,type:str]
+k8sServiceAccountKey: ENC[AES256_GCM,data:5wotrdBmUGs2+aaFC3BOEqeeF0ukrD/ilnP0kxvR+N85d3dh5n+h9XWcCYh33kXNK4eaFTz1jLUvE3Renbwq8xonIwcNd5Nirf59TplhvN3NdZB0XXld4a8N/0pe+OBXbwzLZk2mp+wO3p4crjuj2dZcCdORuSHPJsEmy6ngnhNthIcEPCK55V6465TVM/XqRB+AStYkXsSNN80PIpz/stj9KAz+/Yv8n8uJ4M3h6gSW0Fvh7RPjxnsWdkOORepGQi3Awoamfm2Py1puyO8f4nqvOjcPsfT4BIq72b/bcZj8RKn+YAdOGwxzSn3BBm/h3SFis6UIOzFeAdpxOIPjpPSCb6XOnWfJdx5Q+DvQikW5UupgKUGxCUjVtANm3Kl6FwBjfrp+FRJ9C6lpO/uiFA==,iv:8pweQjYhc08LDFkHlp+RA9CIJpqSRrWB8OfglmlpR8E=,tag:BzFTwxBImV0c2sug8nsnBg==,type:str]
+machineCert: ENC[AES256_GCM,data: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,iv:84jTdnpzZfaYdpuJbEmkXKW3HNMErO3DpfAh+8Uj18U=,tag:9R2aRzSIWp1FA2U7yQu4XQ==,type:str]
+machineCertKey: ENC[AES256_GCM,data:xR8U6a2TFgSjGy9Js0zCKl2KhozjP3eLIuocRUd7FLPfcTFJLr9rzzwIrS0PzHYGULVC6agoWkgrNyD6tmDiE56rLr6WSEtfYOEd3Ogo7Cpqz/LQl8/KLqD1TdhTjnTGFOp8s+EoP7k+b06VXktrgmgmtlsKb+BOD9CYz6ERsqQG4iznwKQ+N1wvwPHWWu9DxFu7w2GQ+DuQC4He6OEJSajgCft2pSRhQuwgr7UrU+3SrNU1,iv:Z6tdsKK2Dz+fUGRETe9I/07GNLuds0VthKVQLDye140=,tag:Dwm6kLsRW0drYtAHiGSMuQ==,type:str]
+machineToken: ENC[AES256_GCM,data:MlSSEU+U5rTjXR2TXRTIHx4a4e5JxgE=,iv:6PaL7uUn4lT9coW1H+a8ciilZPLGLM9i7NjKmS7MSwI=,tag:qmvDnd8m493TWlMEHftbWg==,type:str]
+domainName: ENC[AES256_GCM,data:wzMS6n9SB1Xbeg==,iv:B4yhCbElyuyicXkxx+7coeounhO0O3TfisVGZE5mqK0=,tag:GJVuH2g3frBUSWUbLLewrw==,type:str]
+clusterEndpointIP: ENC[AES256_GCM,data:VKOulZPk2K9cGOM=,iv:VxwZkfQgaj9V3u1gq8uN8YVLPAiCPIW3cP8g5LnLbqs=,tag:PK7AKSzvk2ZIJiFErDVH4A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -22,14 +22,14 @@ sops:
         - recipient: age1nfn3vxpsgm49ljgs8kxevga9makhh9aply6ddgf9wplsfuwpcv2qzmqatc
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWWEljN2p6Rzcxdm1HdHoz
-            clpJVzE5VHZ0azBLTSt6NVhzVjd5NjUwUFh3Cjk2eXJENnBES0U0NTJxWWlXODd1
-            cFpGRlA3VElKOE5ZcHJpdHFFWkZTQk0KLS0tIDJKSXJFdWl2bTJkbDcyYldCYWtH
-            eU95UTBBaWMvZG1pR2w0TGVhakRjZHMKdK9EZdDyy10bb6FcbBpV5SUalKLMVYaI
-            zqxWDgww3QqDuUF/NeS7UJ0gCwll779gpFmIgNw5TtyHNKyjGfXcAQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlOTY2ZFJ3VnpFMUhEbkMr
+            NVlYeVFjZkpDcGFuVmNoNVA0OEFtc3RrT3hNCkpEbG5OQ2dRNDE0RVBjeEQ4UWk3
+            NmF4aU9HMHNDUnkxK0t6aVQvSFNBbXMKLS0tIFVFSW9LY0YyNm9CTkFwaHdZYUhD
+            RVZQMDRUeXlYUzVBYUx6T2lwY0JiczgKcpy2XCzi0jMT5UNtNj8Z9LrrS5bvvgdH
+            PFc8ni7dnsstNmmA7xOTYgoeXVdfPEspcIeBSBzjlJvJ+pVcpuKUdA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-07-29T13:21:35Z"
-    mac: ENC[]
+    lastmodified: "2022-07-29T16:46:12Z"
+    mac: ENC[AES256_GCM,data:8JN2NMgd46pdRdBpY1DqwyT5P1C9arqNBJjvWWiK4jBB02b8Vs2j240sIme6r4LhLbAWAiZbMomK9yjgkl6NYUjiI0VRktrf2oS76ydnkSJs2sLUORzxjDnpN0E/hMbuCXfWeOW6szxM6BJEnTEhuxGLrvu7OvCrO+4MvylVmrc=,iv:uJGUQnEpMpB2ecIie6W+u9aWLsjwlygnah5d+M/n+L4=,tag:qRK+l+sRSE0O/N/GS4lzlA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3