Revert "Cilium: Enable wireguard-go fallback & mount TUN device from host"

This reverts commit 08baebbe627c0b63ab4d62baf540ad4563562001.

cli/internal/helm/charts/cilium/values.yaml

@@ -132,13 +132,13 @@ extraArgs: []
 extraEnv: []
 
 # -- Additional agent hostPath mounts.
-extraHostPathMounts:
-  - name: dev-net
-    mountPath: /dev/net
-    hostPath: /dev/net
-    hostPathType: Directory
-    readOnly: true
-    mountPropagation: HostToContainer
+extraHostPathMounts: []
+  # - name: host-mnt-data
+  #   mountPath: /host/mnt/data
+  #   hostPath: /mnt/data
+  #   hostPathType: Directory
+  #   readOnly: true
+  #   mountPropagation: HostToContainer
 
 # -- Additional agent volumes.
 extraVolumes: []
@@ -525,7 +525,7 @@ encryption:
 
   wireguard:
     # -- Enables the fallback to the user-space implementation.
-    userspaceFallback: true
+    userspaceFallback: false
 
   # -- Deprecated in favor of encryption.ipsec.keyFile.
   # Name of the key file inside the Kubernetes secret configured via secretName.

cli/internal/helm/charts/cilium/values.yaml.tmpl

@@ -522,7 +522,7 @@ encryption:
 
   wireguard:
     # -- Enables the fallback to the user-space implementation.
-    userspaceFallback: true
+    userspaceFallback: false
 
   # -- Deprecated in favor of encryption.ipsec.keyFile.
   # Name of the key file inside the Kubernetes secret configured via secretName.
@@ -1582,13 +1582,13 @@ operator:
   extraEnv: []
 
   # -- Additional cilium-operator hostPath mounts.
-  extraHostPathMounts:
-    - name: dev-net
-      mountPath: /dev/net
-      hostPath: /dev/net
-      hostPathType: Directory
-      readOnly: true
-      mountPropagation: HostToContainer
+  extraHostPathMounts: []
+    # - name: host-mnt-data
+    #   mountPath: /host/mnt/data
+    #   hostPath: /mnt/data
+    #   hostPathType: Directory
+    #   readOnly: true
+    #   mountPropagation: HostToContainer
 
   # -- Additional cilium-operator volumes.
   extraVolumes: []