Leonard Cohnen e9694d40b9 deps: update cilium
Bumping Cilium to also enable node-to-node encryption and
node-to-node strict mode. Since the second is not upstream
we use our fork.
2023-11-15 19:27:33 +01:00

26 lines
641 B
YAML

{{- if ne .Values.clustermesh.apiserver.tls.authMode "legacy" }}
---
apiVersion: v1
kind: ConfigMap
metadata:
name: clustermesh-remote-users
namespace: {{ .Release.Namespace }}
{{- with .Values.clustermesh.annotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
labels:
app.kubernetes.io/part-of: cilium
data:
users.yaml: |
users:
{{- if .Values.clustermesh.apiserver.kvstoremesh.enabled }}
- name: remote-{{ .Values.cluster.name }}
role: remote
{{- end }}
{{- range .Values.clustermesh.config.clusters }}
- name: remote-{{ .name }}
role: remote
{{- end }}
{{- end }}