cilium helm

Cilium is a networking, security, and observability solution for Kubernetes, built on eBPF. It provides high-performance networking with support for Layer 3-7 policies, load balancing, and transparent encryption. With Cilium, you can enforce fine-grained security policies, observe network flows in real time, and integrate seamlessly with service meshes. It also offers eBPF-powered network policies and cluster mesh capabilities, enabling secure communication across multiple Kubernetes clusters.

More popular helm chart found

cilium from helm.cilium is more popular with 113 repositories.

Install

Install with:

helm repo add cilium oci://ghcr.io/astrateam-net/oci-charts/cilium
helm install cilium cilium/cilium -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 73)

NameRepoStarsVersionTimestamp
ciliumburoa/k8s-gitops3191.18.33 days ago
ciliumkashalls/home-cluster1051.18.37 days ago
ciliumwaifulabs/infrastructure1781.18.37 days ago
ciliumblackjid/home-ops971.18.311 days ago
ciliumszinn/k8s-homelab2701.18.314 days ago

Values

See the most popular values for this chart:

KeyTypes
hubble.enabled (61)
false
boolean
hubble.metrics.enabled[] (21)
- dns:query
- drop
- tcp
- flow
- port-distribution
- icmp
- http
string
hubble.metrics.serviceMonitor.enabled (20)
true
boolean
hubble.metrics.dashboards.enabled (19)
true
boolean
hubble.metrics.dashboards.annotations.grafana_folder (5)
Cilium
string
hubble.metrics.dashboards.labelValue (1)
string
hubble.metrics.enableOpenMetrics (1)
boolean
hubble.relay.enabled (20)
true
boolean
hubble.relay.rollOutPods (19)
true
boolean
hubble.relay.prometheus.serviceMonitor.enabled (17)
true
boolean
hubble.relay.replicas (1)
number
hubble.relay.tls.server.enabled (1)
boolean
hubble.ui.enabled (19)
true
boolean
hubble.ui.rollOutPods (19)
true
boolean
hubble.ui.ingress.enabled (8)
false
boolean
hubble.ui.ingress.className (2)
string
hubble.ui.ingress.hosts[] (2)
string
hubble.ui.ingress.annotations."cert-manager.io/cluster-issuer" (1)
string
hubble.ui.ingress.annotations."ingress.home.arpa/nginx-internal" (1)
string
hubble.ui.ingress.tls[].hosts[] (1)
string
hubble.ui.ingress.tls[].secretName (1)
string
hubble.ui.backend.image.repository (1)
string
hubble.ui.backend.image.tag (1)
string
hubble.ui.frontend.image.repository (1)
string
hubble.ui.frontend.image.tag (1)
string
hubble.ui.replicas (1)
number
hubble.dashboards.enabled (2)
boolean
hubble.tls.auto.method (2)
string
hubble.tls.auto.certManagerIssuerRef.group (1)
string
hubble.tls.auto.certManagerIssuerRef.kind (1)
string
hubble.tls.auto.certManagerIssuerRef.name (1)
string
hubble.tls.auto.enabled (1)
boolean
hubble.tls.enabled (1)
boolean
hubble.prometheus.enabled (1)
boolean
hubble.prometheus.serviceMonitor.enabled (1)
boolean
prometheus.enabled (56)
true
boolean
prometheus.serviceMonitor.enabled (56)
true
boolean
prometheus.serviceMonitor.trustCRDsExist (56)
true
boolean
prometheus.annotations.grafana_folder (5)
Infrastructure
string
operator.prometheus.enabled (55)
true
boolean
operator.prometheus.serviceMonitor.enabled (55)
true
boolean
operator.prometheus.serviceMonitor.metricRelabelings[].action (2)
string
operator.prometheus.serviceMonitor.metricRelabelings[].regex (2)
string
operator.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (2)
string
operator.dashboards.enabled (52)
true
boolean
operator.dashboards.annotations.grafana_folder (22)
Cilium
string
operator.replicas (52)
2
number, string
operator.rollOutPods (50)
true
boolean
operator.enabled (3)
true
boolean
operator.annotations.grafana_folder (1)
string
operator.label (1)
string
autoDirectNodeRoutes (51)
true
boolean
cgroup.hostRoot (51)
/sys/fs/cgroup
string
cgroup.automount.enabled (43)
false
boolean
cgroup.autoMount.enabled (8)
false
boolean
dashboards.enabled (51)
true
boolean
dashboards.annotations.grafana_folder (23)
Cilium
string
dashboards.label (1)
string
ipv4NativeRoutingCIDR (51)
10.42.0.0/16
string
k8sServiceHost (51)
127.0.0.1
string
k8sServicePort (51)
7445
number
kubeProxyReplacement (51)
true
boolean
rollOutCiliumPods (51)
true
boolean
routingMode (51)
native
string
securityContext.capabilities.ciliumAgent[] (51)
- CHOWN
- KILL
- NET_ADMIN
- NET_RAW
- IPC_LOCK
- SYS_ADMIN
- SYS_RESOURCE
- PERFMON
- BPF
- DAC_OVERRIDE
- FOWNER
- SETGID
- SETUID
string
securityContext.capabilities.cleanCiliumState[] (51)
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE
string
securityContext.capabilities.dashboards.annotations.grafana_folder (1)
string
bpf.masquerade (50)
true
boolean
bpf.datapathMode (41)
netkit
string
bpf.preallocateMaps (41)
true
boolean
bpf.tproxy (28)
true
boolean
bpf.hostLegacyRouting (5)
true
boolean
bpf.distributedLRU.enabled (1)
boolean
bpf.mapDynamicSizeRatio (1)
number
ipam.mode (50)
kubernetes
string
kubeProxyReplacementHealthzBindAddr (50)
0.0.0.0:10256
string
endpointRoutes.enabled (49)
true
boolean
loadBalancer.algorithm (49)
maglev
string
loadBalancer.mode (49)
dsr
string
cni.exclusive (48)
false
boolean
l2announcements.enabled (48)
true
boolean
localRedirectPolicy (48)
true
boolean
bgpControlPlane.enabled (43)
true
boolean
bandwidthManager.enabled (41)
true
boolean
bandwidthManager.bbr (40)
true
boolean
envoy.enabled (41)
false
boolean
envoy.prometheus.serviceMonitor.enabled (13)
true
boolean
envoy.rollOutPods (13)
true
boolean
envoy.log.accessLogBufferSize (1)
number
envoy.log.format_json.level (1)
string
envoy.log.format_json.logger (1)
string
envoy.log.format_json.msg (1)
string
envoy.log.format_json.src (1)
string
envoy.log.format_json.thread (1)
string
envoy.log.format_json.ts (1)
string
bpfClockProbe (38)
true
boolean
enableIPv4BIGTCP (31)
true
boolean
pmtuDiscovery.enabled (27)
true
boolean
devices (25)
bond+
string
gatewayAPI.enabled (21)
true
boolean
gatewayAPI.enableAlpn (8)
true
boolean
gatewayAPI.xffNumTrustedHops (8)
1
number
gatewayAPI.relay.enabled (1)
boolean
gatewayAPI.relay.rollOutPods (1)
boolean
gatewayAPI.serviceMonitor.enabled (1)
boolean
gatewayAPI.ui.enabled (1)
boolean
gatewayAPI.ui.ingress.enabled (1)
boolean
gatewayAPI.ui.rollOutPods (1)
boolean
cluster.id (18)
1
number
cluster.name (18)
main
string
socketLB.hostNamespaceOnly (11)
true
boolean
socketLB.enabled (1)
boolean
socketLB.terminatePodConnections (1)
boolean
ipv6.enabled (7)
true
boolean
ipv6NativeRoutingCIDR (6)
string
ipv4.enabled (5)
true
boolean
enableIPv6BIGTCP (4)
true
boolean
annotateK8sNode (2)
boolean
enableRuntimeDeviceDetection (2)
boolean
encryption.enabled (2)
boolean
encryption.type (2)
string
bgp.announce.loadbalancerIP (1)
boolean
bgp.announce.podCIDR (1)
boolean
bgp.enabled (1)
boolean
Cluster.id (1)
number
Cluster.name (1)
string
debug.enabled (1)
boolean
directRoutingSkipUnreachable (1)
boolean
externalIPs.enabled (1)
boolean
ingressController.service.annotations."io.cilium/lb-ipam-ips" (1)
string
k8s.requireIPv4PodCIDR (1)
boolean
k8s.requireIPv6PodCIDR (1)
boolean
LoadBalancer.algorithm (1)
string
LoadBalancer.mode (1)
string
localRedirectPolicies.enabled (1)
boolean
localRedirectPolicies.enbled (1)
boolean
maglev.hashSeed (1)
string
maglev.tableSize (1)
number
ui.enabled (1)
boolean
ui.rollOutPods (1)
boolean