feat(kilo): add Cilium compatibility variant

Add a new "cilium" variant to the kilo PackageSource that deploys kilo
with --compatibility=cilium flag. This enables Cilium-aware IPIP
encapsulation, routing outer packets through Cilium's VxLAN overlay
instead of the host network.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>

packages/core/platform/sources/kilo.yaml

@@ -20,3 +20,16 @@ spec:
         privileged: true
         namespace: cozy-kilo
         releaseName: kilo
+  - name: cilium
+    dependsOn:
+    - cozystack.networking
+    components:
+    - name: kilo
+      path: system/kilo
+      valuesFiles:
+      - values.yaml
+      - values-cilium.yaml
+      install:
+        privileged: true
+        namespace: cozy-kilo
+        releaseName: kilo

packages/system/kilo/templates/kilo.yaml

@@ -29,6 +29,9 @@ spec:
         - --hostname=$(NODE_NAME)
         - --cni=false
         - --clean-up-interface={{ .Values.kilo.cleanUpInterface | default "false" }}
+        {{- with .Values.kilo.compatibility }}
+        - --compatibility={{ . }}
+        {{- end }}
         - --encapsulate=crosssubnet
         - --local=false
         - --mesh-granularity={{ .Values.kilo.meshGranularity | default "location" }}

packages/system/kilo/values-cilium.yaml

@@ -0,0 +1,2 @@
+kilo:
+  compatibility: cilium

packages/system/kilo/values.yaml

@@ -1,7 +1,7 @@
 kilo:
   image:
     pullPolicy: IfNotPresent
-    tag: v0.7.1@sha256:c2160097ef3aa4e9e460430665b743a14b8f19480211edab6f946264718340ff
+    tag: v0.8.1@sha256:56602fa796eccea0d0e005c29e5c7094ae46d15bd5306b02b829672b178dcd5c
     repository: ghcr.io/cozystack/cozystack/kilo
   podCIDR: 10.244.0.0/16
   serviceCIDR: 10.96.0.0/16