cilium helm

Cilium is a networking, security, and observability solution for Kubernetes, built on eBPF. It provides high-performance networking with support for Layer 3-7 policies, load balancing, and transparent encryption. With Cilium, you can enforce fine-grained security policies, observe network flows in real time, and integrate seamlessly with service meshes. It also offers eBPF-powered network policies and cluster mesh capabilities, enabling secure communication across multiple Kubernetes clusters.

More popular helm chart found

cilium from helm.cilium is more popular with 132 repositories.

Install

Install with:

helm repo add cilium oci://ghcr.io/home-operations/charts-mirror/cilium
helm install cilium cilium/cilium -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 28)

NameRepoStarsVersionTimestamp
ciliumjoryirving/home-ops1621.17.34 days ago
ciliumishioni/homelab-ops1291.17.34 days ago
ciliumburoa/k8s-gitops2561.17.34 days ago
ciliumonedr0p/home-ops22981.17.34 days ago
ciliumxunholy/k8s-gitops5481.17.34 days ago

Values

See the most popular values for this chart:

KeyTypes
hubble.ui.enabled (21)
true
boolean
hubble.ui.rollOutPods (19)
true
boolean
hubble.ui.ingress.enabled (7)
true
boolean
hubble.ui.ingress.className (5)
internal
string
hubble.ui.ingress.hosts[] (5)
- hubble.${SECRET_DOMAIN}
string
hubble.ui.ingress.annotations."hajimari.io/appName" (3)
string
hubble.ui.ingress.annotations."hajimari.io/enable" (3)
true
string
hubble.ui.ingress.annotations."hajimari.io/icon" (3)
lan
string
hubble.ui.ingress.annotations."cert-manager.io/cluster-issuer" (2)
string
hubble.ui.ingress.annotations."hajimari.io/group" (2)
string
hubble.ui.ingress.annotations."hajimari.io/instance" (2)
string
hubble.ui.ingress.annotations."gethomepage.dev/enabled" (1)
string
hubble.ui.ingress.annotations."gethomepage.dev/group" (1)
string
hubble.ui.ingress.annotations."gethomepage.dev/icon" (1)
string
hubble.ui.ingress.annotations."gethomepage.dev/name" (1)
string
hubble.ui.ingress.tls[].hosts[] (2)
string
hubble.ui.ingress.tls[].secretName (2)
string
hubble.enabled (20)
true
boolean
hubble.relay.prometheus.serviceMonitor.enabled (20)
true
boolean
hubble.relay.enabled (19)
true
boolean
hubble.relay.rollOutPods (17)
true
boolean
hubble.relay.tls.server.enabled (1)
boolean
hubble.metrics.enabled[] (18)
- dns:query
- drop
- tcp
- flow
- port-distribution
- icmp
- http
string
hubble.metrics.serviceMonitor.enabled (18)
true
boolean
hubble.metrics.dashboards.enabled (16)
true
boolean
hubble.metrics.dashboards.annotations.grafana_folder (4)
Cilium
string
hubble.metrics.dashboards.label (1)
string
hubble.metrics.dashboards.labelValue (1)
string
hubble.dashboards.enabled (4)
true
boolean
hubble.dashboards.annotations.grafana_folder (3)
Cilium
string
hubble.dashboards.label (3)
grafana_dashboard
string
hubble.dashboards.labelValue (3)
1
string
hubble.dashboards.namespace (3)
monitoring
string
hubble.serviceMonitor.enabled (3)
true
boolean
hubble.tls.auto.certManagerIssuerRef.group (1)
string
hubble.tls.auto.certManagerIssuerRef.kind (1)
string
hubble.tls.auto.certManagerIssuerRef.name (1)
string
hubble.tls.auto.method (1)
string
operator.prometheus.serviceMonitor.enabled (9)
true
boolean
operator.prometheus.serviceMonitor.metricRelabelings[].action (2)
string
operator.prometheus.serviceMonitor.metricRelabelings[].regex (2)
string
operator.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (2)
string
operator.prometheus.enabled (6)
true
boolean
operator.dashboards.enabled (7)
true
boolean
operator.dashboards.annotations.grafana_folder (6)
Cilium
string
operator.replicas (3)
number, string
operator.rollOutPods (3)
true
boolean
prometheus.serviceMonitor.enabled (9)
true
boolean
prometheus.serviceMonitor.trustCRDsExist (8)
true
boolean
prometheus.enabled (6)
true
boolean
dashboards.annotations.grafana_folder (5)
Cilium
string
dashboards.enabled (5)
true
boolean
cgroup.automount.enabled (3)
false
boolean
cgroup.hostRoot (3)
/sys/fs/cgroup
string
cluster.id (3)
1
number
cluster.name (3)
string
ipam.mode (3)
kubernetes
string
k8sServiceHost (3)
string
k8sServicePort (3)
7445
number
kubeProxyReplacement (3)
true
boolean
kubeProxyReplacementHealthzBindAddr (3)
0.0.0.0:10256
string
rollOutCiliumPods (3)
true
boolean
securityContext.capabilities.ciliumAgent[] (3)
- CHOWN
- KILL
- NET_ADMIN
- NET_RAW
- IPC_LOCK
- SYS_ADMIN
- SYS_RESOURCE
- DAC_OVERRIDE
- FOWNER
- SETGID
- SETUID
string
securityContext.capabilities.cleanCiliumState[] (3)
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE
string
securityContext.privileged (2)
boolean
enableRuntimeDeviceDetection (2)
boolean
endpointRoutes.enabled (2)
boolean
gatewayAPI.enabled (2)
boolean
ipv4NativeRoutingCIDR (2)
string
l2announcements.enabled (2)
boolean
localRedirectPolicy (2)
boolean
autoDirectNodeRoutes (1)
boolean
bpf.masquerade (1)
boolean
cni.exclusive (1)
boolean
ingressController.service.annotations."io.cilium/lb-ipam-ips" (1)
string
loadBalancer.algorithm (1)
string
loadBalancer.mode (1)
string
routingMode (1)
string
socketLB.hostNamespaceOnly (1)
boolean