apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cilium
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "0"
spec:
  project: default
  destination:
    server: https://kubernetes.default.svc
    namespace: kube-system
  sources:
    - repoURL: https://helm.cilium.io/
      chart: cilium
      targetRevision: 1.16.6
      helm:
        valuesObject:
          k8sServiceHost: 192.168.50.20
          k8sServicePort: 6443
          ingressController:
            enabled: true
            default: true
            loadbalancerMode: shared
            hostNetwork:
              enabled: true
          cgroup:
            autoMount:
              enabled: false
            hostRoot: /sys/fs/cgroup
          ipam:
            operator:
              clusterPoolIPv4PodCIDRList:
                - 10.244.0.0/16
          securityContext:
            capabilities:
              ciliumAgent:
                - CHOWN
                - KILL
                - NET_ADMIN
                - NET_RAW
                - IPC_LOCK
                - SYS_ADMIN
                - SYS_RESOURCE
                - DAC_OVERRIDE
                - FOWNER
                - SETGID
                - SETUID
              cleanCiliumState:
                - NET_ADMIN
                - SYS_ADMIN
                - SYS_RESOURCE
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true