kubespray/roles/network_plugin/cilium/templates/cilium-config.yml.j2

kind: ConfigMap
apiVersion: v1
metadata:
  name: cilium-config
  namespace: kube-system
data:
  # This etcd-config contains the etcd endpoints of your cluster. If you use
  # TLS please make sure you uncomment the ca-file line and add the respective
  # certificate has a k8s secret, see explanation bellow in the comment labeled
  # "ETCD-CERT"
  etcd-config: |-
    ---
    endpoints: 
{% for ip_addr in etcd_access_addresses.split(',') %}
    - {{ ip_addr }}
{% endfor %}
    #
    # In case you want to use TLS in etcd, uncomment the following line
    # and add the certificate as explained in the comment labeled "ETCD-CERT"
    ca-file: "{{ cilium_cert_dir }}/ca_cert.crt"
    #
    # In case you want client to server authentication, uncomment the following
    # lines and add the certificate and key in cilium-etcd-secrets bellow
    key-file: "{{ cilium_cert_dir }}/key.pem"
    cert-file: "{{ cilium_cert_dir }}/cert.crt"

  # If you want to run cilium in debug mode change this value to true
  debug: "{{ cilium_debug }}"
  disable-ipv4: "{{ cilium_disable_ipv4 }}"