cilium helm

Cilium is a networking, security, and observability solution for Kubernetes, built on eBPF. It provides high-performance networking with support for Layer 3-7 policies, load balancing, and transparent encryption. With Cilium, you can enforce fine-grained security policies, observe network flows in real time, and integrate seamlessly with service meshes. It also offers eBPF-powered network policies and cluster mesh capabilities, enabling secure communication across multiple Kubernetes clusters.

More popular helm chart found

cilium from astrateam-net/oci-charts/cilium is more popular with 122 repositories.

Install

Install with:

helm repo add cilium oci://quay.io/cilium/charts/cilium
helm install cilium cilium/cilium -f values.yaml

Examples

See examples from other people.

Top Repositories (0 out of 6)

NameRepoStarsVersionTimestamp

Values

See the most popular values for this chart:

KeyTypes
hubble.enabled (6)
true
boolean
hubble.metrics.enabled[] (4)
- dns:query
- drop
- tcp
- flow
- port-distribution
- icmp
- http
string
hubble.metrics.serviceMonitor.enabled (3)
true
boolean
hubble.metrics.dashboards.enabled (2)
true
boolean
hubble.metrics.dashboards.annotations.grafana_folder (1)
Cilium
string
hubble.relay.enabled (4)
true
boolean
hubble.relay.prometheus.serviceMonitor.enabled (2)
true
boolean
hubble.relay.prometheus.enabled (1)
true
boolean
hubble.relay.rollOutPods (1)
true
boolean
hubble.ui.enabled (4)
true
boolean
hubble.ui.ingress.enabled (2)
true
boolean
hubble.ui.ingress.hosts[] (2)
- hubble.${DOMAIN}
string
hubble.ui.ingress.tls[].hosts[] (2)
- hubble.${DOMAIN}
string
hubble.ui.ingress.tls[].secretName (2)
hubble-${DOMAIN/./-}-tls
string
hubble.ui.ingress.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
hubble.ui.ingress.annotations."external-dns.alpha.kubernetes.io/target" (1)
traefik.local.${SECRET_DOMAIN}
string
hubble.ui.ingress.annotations."gethomepage.dev/description" (1)
Network Observability
string
hubble.ui.ingress.annotations."gethomepage.dev/enabled" (1)
true
string
hubble.ui.ingress.annotations."gethomepage.dev/group" (1)
Networking
string
hubble.ui.ingress.annotations."gethomepage.dev/icon" (1)
sh-cilium-hubble
string
hubble.ui.ingress.annotations."gethomepage.dev/name" (1)
Hubble
string
hubble.ui.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-internal-with-errors@kubernetescrd
string
hubble.ui.ingress.className (1)
nginx
string
hubble.ui.rollOutPods (1)
true
boolean
hubble.observe.enabled (1)
true
boolean
k8sServiceHost (5)
127.0.0.1
string
k8sServicePort (5)
7445
number
kubeProxyReplacement (5)
true
boolean
ipam.mode (4)
kubernetes
string
ipam.operator.clusterPoolIPv4PodCIDRList[] (1)
- ${POD_CIDR}
string
kubeProxyReplacementHealthzBindAddr (4)
0.0.0.0:10256
string
l2announcements.enabled (4)
true
boolean
l2announcements.leaseDuration (1)
3s
string
l2announcements.leaseRenewDeadline (1)
1s
string
l2announcements.leaseRetryPeriod (1)
200ms
string
operator.replicas (4)
1
number
operator.rollOutPods (4)
true
boolean
operator.prometheus.enabled (3)
true
boolean
operator.prometheus.serviceMonitor.enabled (3)
true
boolean
operator.dashboards.enabled (1)
true
boolean
operator.enabled (1)
true
boolean
prometheus.enabled (4)
true
boolean
prometheus.serviceMonitor.enabled (4)
true
boolean
prometheus.serviceMonitor.trustCRDsExist (4)
true
boolean
rollOutCiliumPods (4)
true
boolean
securityContext.capabilities.ciliumAgent[] (4)
- CHOWN
- KILL
- NET_ADMIN
- NET_RAW
- IPC_LOCK
- SYS_ADMIN
- SYS_RESOURCE
- DAC_OVERRIDE
- FOWNER
- SETGID
- SETUID
string
securityContext.capabilities.cleanCiliumState[] (4)
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE
string
securityContext.privileged (2)
true
boolean
bpf.masquerade (3)
true
boolean
bpf.datapathMode (1)
veth
string
bpf.preallocateMaps (1)
true
boolean
cgroup.automount.enabled (3)
false
boolean
cgroup.hostRoot (3)
/sys/fs/cgroup
string
cni.exclusive (3)
false
boolean
endpointRoutes.enabled (3)
true
boolean
envoy.enabled (3)
false
boolean
ipv4NativeRoutingCIDR (3)
${PODNET}
string
autoDirectNodeRoutes (2)
true
boolean
cluster.id (2)
1
number
cluster.name (2)
main
string
dashboards.enabled (2)
true
boolean
dashboards.annotations.grafana_folder (1)
Cilium
string
enableRuntimeDeviceDetection (2)
true
boolean
loadBalancer.algorithm (2)
maglev
string
loadBalancer.mode (2)
snat
string
loadBalancer.serviceTopology (1)
true
boolean
localRedirectPolicies.enabled (2)
true
boolean
routingMode (2)
native
string
bandwidthManager.bbr (1)
true
boolean
bandwidthManager.enabled (1)
true
boolean
bgpControlPlane.enabled (1)
true
boolean
bpfClockProbe (1)
true
boolean
defaultLBServiceIPAM (1)
none
string
devices[] (1)
- ens18
string
enableIPv4BIGTCP (1)
true
boolean
externalIPs.enabled (1)
true
boolean
gatewayAPI.enabled (1)
false
boolean
localRedirectPolicy (1)
true
boolean
nodeinit.enabled (1)
true
boolean
nodePort.enabled (1)
true
boolean
pmtuDiscovery.enabled (1)
true
boolean
socketLB.hostNamespaceOnly (1)
true
boolean
updateStrategy.rollingUpdate.maxUnavailable (1)
1
number
updateStrategy.type (1)
RollingUpdate
string