kubespray/roles/network_plugin/cilium/defaults/main.yml

---
# Log-level
cilium_debug: false
cilium_disable_ipv4: false

# Etcd SSL dirs
cilium_cert_dir: /etc/cilium/certs
etcd_cert_dir: /etc/ssl/etcd/ssl

# Cilium Network Policy directory
cilium_policy_dir: /etc/kubernetes/policy

# Limits for apps
cilium_memory_limit: 500M
cilium_cpu_limit: 200m
cilium_memory_requests: 64M
cilium_cpu_requests: 50m

# Optional features
cilium_enable_prometheus: false

rbac_resources:
  - sa
  - clusterrole
  - clusterrolebinding