From 2eb7bccee4906333c41a4713130c7b2ab2e2d0db Mon Sep 17 00:00:00 2001 From: Aleksei Sviridkin Date: Thu, 23 Apr 2026 16:50:47 +0300 Subject: [PATCH] feat(cilium): enable embedded envoy and Gateway API controller Flip envoy.enabled and gatewayAPI.enabled on the vendored Cilium chart. Cilium becomes the Gateway API implementation for Cozystack: cilium-envoy DaemonSet starts on each node (approximately 100MB RAM per node in steady state), and the Cilium operator begins reconciling gateway.networking.k8s.io resources and publishing the built-in 'cilium' GatewayClass. This value flip alone does not create any Gateway objects. The platform installs only an idle Envoy DaemonSet and a GatewayClass until per-tenant gateway manifests are actually created by the platform chart. Assisted-By: Claude Signed-off-by: Aleksei Sviridkin --- packages/system/cilium/values.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/system/cilium/values.yaml b/packages/system/cilium/values.yaml index 9aba7cb9..81d0e843 100644 --- a/packages/system/cilium/values.yaml +++ b/packages/system/cilium/values.yaml @@ -18,7 +18,9 @@ cilium: tag: 1.19.3 digest: "sha256:700f06f4803a838a8e830be5ace4650e3ad82bdefabfb2f4d110368d307a5efb" envoy: - enabled: false + enabled: true + gatewayAPI: + enabled: true rollOutCiliumPods: true operator: rollOutPods: true