# Cilium TaskServ Defaults - Concrete Configuration Values
# Migrated from: provisioning/extensions/taskservs/networking/cilium/kcl/

let _presets = (import "schemas/lib/concerns_presets.ncl").presets in

{
  # Default Cilium configuration
  cilium | default = {
    name | default = "cilium",
    version | default = "1.19.3",
    cluster_name | default = "",
    cluster_id   | default = 0,
    enable_ingress_controller | default = false,
    ingress_lb_mode | default = 'shared,
    kube_proxy_replacement | default = false,
    socket_lb              | default = true,
    envoy_enabled          | default = true,
    enable_gateway_api     | default = false,
    gateway_api_version    | default = "v1.2.1",
    k8s_service_host       | default = "",
    k8s_service_port       | default = 6443,
    public_fip             | default = "",
    gateway_name           | default = "",
    gateway_sharing_key    | default = "",
    private_fip            | default = "",
    private_gateway_name   | default = "",
    enable_l2_announcement    | default = false,
    enable_l2_neigh_discovery | default = false,
    operations | default = {
      install   = true,
      reinstall = true,
      delete    = true,
      health    = true,
    },
    live_check | default = {
      strategy  = 'k8s_pods,
      scope     = 'cp_only,
      namespace = "kube-system",
      selector  = "cilium",
    },

    # ServiceConcerns default — CNI controller; infrastructure_glue preset.
    concerns | default = _presets.infrastructure_glue,
  },
}