MTU: {{ cilium_mtu }}
debug:
  enabled: {{ cilium_debug }}
ipv4:
  enabled: {{ cilium_enable_ipv4 }}
ipv6:
  enabled: {{ cilium_enable_ipv6 }}

l2announcements:
  enabled: {{ cilium_l2announcements }}

healthPort: {{ cilium_agent_health_port }}

identityAllocationMode: {{ cilium_identity_allocation_mode }}

tunnelProtocol: {{ cilium_tunnel_mode }}

loadbalancer:
  mode: {{ cilium_loadbalancer_mode }}

kubeProxyReplacement: {{ cilium_kube_proxy_replacement }}

extraVolumes:
  {{ cilium_agent_extra_volumes | to_nice_yaml(indent=2) | indent(2) }}

extraVolumeMounts:
  {{ cilium_agent_extra_volume_mounts | to_nice_yaml(indent=2) | indent(2) }}

extraArgs:
  {{ cilium_agent_extra_args | to_nice_yaml(indent=2) | indent(2) }}

bpf:
  masquerade: {{ cilium_enable_bpf_masquerade }}
  hostLegacyRouting: {{ cilium_enable_host_legacy_routing }}
  monitorAggregation: {{ cilium_monitor_aggregation }}
  preallocateMaps: {{ cilium_preallocate_bpf_maps }}
  mapDynamicSizeRatio: {{ cilium_bpf_map_dynamic_size_ratio }}

cni:
  exclusive: {{ cilium_cni_exclusive }}
  logFile: {{ cilium_cni_log_file }}

autoDirectNodeRoutes: {{ cilium_auto_direct_node_routes }}

ipv4NativeRoutingCIDR: {{ cilium_native_routing_cidr }}
ipv6NativeRoutingCIDR: {{ cilium_native_routing_cidr_ipv6 }}

encryption:
  enabled: {{ cilium_encryption_enabled }}
  {% if cilium_encryption_enabled %}
  type: {{ cilium_encryption_type }}
  {% if cilium_encryption_type == 'wireguard' %}
  nodeEncryption: {{ cilium_encryption_node_encryption }}
  {% endif %}

  {% endif %}

bandwidthManager:
  enabled: {{ cilium_enable_bandwidth_manager }}
  bbr: {{ cilium_enable_bandwidth_manager_bbr }}

ipMasqAgent:
  enabled: {{ cilium_ip_masq_agent_enable }}
  {% if cilium_ip_masq_agent_enable %}
  config:
    nonMasqueradeCIDRs: {{ cilium_non_masquerade_cidrs }}
    masqLinkLocal: {{ cilium_masq_link_local }}
    masqLinkLocalIPv6: {{ cilium_masq_link_local_ipv6 }}
  # cilium_ip_masq_resync_interval
  {% endif %}

hubble:
  enabled: {{ cilium_enable_hubble }}
  ui:
    enabled: {{ cilium_enable_hubble_ui }}
  metrics:
    enabled: {{ cilium_hubble_metrics }}

ipam:
  mode: {{ cilium_ipam_mode }}
  operator:
    clusterPoolIPv4PodCIDRList:
      - {{ cilium_pool_cidr | default(kube_pods_subnet) }}
    clusterPoolIPv4MaskSize: {{ cilium_pool_mask_size | default(kube_network_node_prefix) }}

    clusterPoolIPv6PodCIDRList:
      - {{ cilium_pool_cidr_ipv6 | default(kube_pods_subnet_ipv6) }}
    clusterPoolIPv6MaskSize: {{ cilium_pool_mask_size_ipv6 | default(kube_network_node_prefix_ipv6) }}

cgroup:
  autoMount:
    enabled: {{ cilium_cgroup_auto_mount }}
  hostRoot: {{ cilium_cgroup_host_root }}

operator:
  replicas: {{ cilium_operator_replicas }}
  extraArgs:
    {{ cilium_operator_extra_args | to_nice_yaml(indent=2) | indent(4) }}
  extraVolumes:
    {{ cilium_operator_extra_volumes | to_nice_yaml(indent=2) | indent(4) }}
  extraVolumeMounts:
    {{ cilium_operator_extra_volume_mounts | to_nice_yaml(indent=2) | indent(4) }}

cluster:
  id: {{ cilium_cluster_id }}
  name: {{ cilium_cluster_name }}

enableIPv4Masquerade: {{ cilium_enable_ipv4_masquerade }}
enableIPv6Masquerade: {{ cilium_enable_ipv6_masquerade }}

hostFirewall:
  enabled: {{ cilium_enable_host_firewall }}