From ef040c2ed283ff38022727782fef0652b50b84e8 Mon Sep 17 00:00:00 2001
From: Andrei Kvapil <kvapss@gmail.com>
Date: Mon, 16 Feb 2026 15:16:38 +0100
Subject: [PATCH] feat(kilo): add Cilium compatibility variant

Add a new "cilium" variant to the kilo PackageSource that deploys kilo
with --compatibility=cilium flag. This enables Cilium-aware IPIP
encapsulation, routing outer packets through Cilium's VxLAN overlay
instead of the host network.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
---
 packages/core/platform/sources/kilo.yaml | 13 +++++++++++++
 packages/system/kilo/templates/kilo.yaml |  3 +++
 packages/system/kilo/values-cilium.yaml  |  2 ++
 packages/system/kilo/values.yaml         |  2 +-
 4 files changed, 19 insertions(+), 1 deletion(-)
 create mode 100644 packages/system/kilo/values-cilium.yaml

diff --git a/packages/core/platform/sources/kilo.yaml b/packages/core/platform/sources/kilo.yaml
index 72602164..95770667 100644
--- a/packages/core/platform/sources/kilo.yaml
+++ b/packages/core/platform/sources/kilo.yaml
@@ -20,3 +20,16 @@ spec:
         privileged: true
         namespace: cozy-kilo
         releaseName: kilo
+  - name: cilium
+    dependsOn:
+    - cozystack.networking
+    components:
+    - name: kilo
+      path: system/kilo
+      valuesFiles:
+      - values.yaml
+      - values-cilium.yaml
+      install:
+        privileged: true
+        namespace: cozy-kilo
+        releaseName: kilo
diff --git a/packages/system/kilo/templates/kilo.yaml b/packages/system/kilo/templates/kilo.yaml
index e209aed2..fef7a718 100644
--- a/packages/system/kilo/templates/kilo.yaml
+++ b/packages/system/kilo/templates/kilo.yaml
@@ -29,6 +29,9 @@ spec:
         - --hostname=$(NODE_NAME)
         - --cni=false
         - --clean-up-interface={{ .Values.kilo.cleanUpInterface | default "false" }}
+        {{- with .Values.kilo.compatibility }}
+        - --compatibility={{ . }}
+        {{- end }}
         - --encapsulate=crosssubnet
         - --local=false
         - --mesh-granularity={{ .Values.kilo.meshGranularity | default "location" }}
diff --git a/packages/system/kilo/values-cilium.yaml b/packages/system/kilo/values-cilium.yaml
new file mode 100644
index 00000000..1a75fc41
--- /dev/null
+++ b/packages/system/kilo/values-cilium.yaml
@@ -0,0 +1,2 @@
+kilo:
+  compatibility: cilium
diff --git a/packages/system/kilo/values.yaml b/packages/system/kilo/values.yaml
index 762f3c26..4057c284 100644
--- a/packages/system/kilo/values.yaml
+++ b/packages/system/kilo/values.yaml
@@ -1,7 +1,7 @@
 kilo:
   image:
     pullPolicy: IfNotPresent
-    tag: v0.7.1@sha256:c2160097ef3aa4e9e460430665b743a14b8f19480211edab6f946264718340ff
+    tag: v0.8.1@sha256:56602fa796eccea0d0e005c29e5c7094ae46d15bd5306b02b829672b178dcd5c
     repository: ghcr.io/cozystack/cozystack/kilo
   podCIDR: 10.244.0.0/16
   serviceCIDR: 10.96.0.0/16