feat(cilium): enable embedded envoy and Gateway API controller

Flip envoy.enabled and gatewayAPI.enabled on the vendored Cilium chart.
Cilium becomes the Gateway API implementation for Cozystack:
cilium-envoy DaemonSet starts on each node (approximately 100MB RAM
per node in steady state), and the Cilium operator begins reconciling
gateway.networking.k8s.io resources and publishing the built-in
'cilium' GatewayClass.

This value flip alone does not create any Gateway objects. The
platform installs only an idle Envoy DaemonSet and a GatewayClass
until per-tenant gateway manifests are actually created by the
platform chart.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>
This commit is contained in:
Aleksei Sviridkin 2026-04-23 16:50:47 +03:00
parent 47aca33c5a
commit 2eb7bccee4
No known key found for this signature in database
GPG key ID: 7988329FDF395282

View file

@ -18,7 +18,9 @@ cilium:
tag: 1.19.3
digest: "sha256:700f06f4803a838a8e830be5ace4650e3ad82bdefabfb2f4d110368d307a5efb"
envoy:
enabled: false
enabled: true
gatewayAPI:
enabled: true
rollOutCiliumPods: true
operator:
rollOutPods: true