Name:         cilium-config
Namespace:    kube-system
Labels:       app.kubernetes.io/managed-by=Helm
Annotations:  meta.helm.sh/release-name: cilium
              meta.helm.sh/release-namespace: kube-system

Data
====
set-cilium-is-up-condition:
----
true
tofqdns-enable-dns-compression:
----
true
cluster-pool-ipv4-cidr:
----
10.0.0.0/8
enable-health-checking:
----
true
enable-policy:
----
default
monitor-aggregation:
----
medium
auto-direct-node-routes:
----
false
cilium-endpoint-gc-interval:
----
5m0s
preallocate-bpf-maps:
----
false
enable-remote-node-identity:
----
true
operator-api-serve-addr:
----
127.0.0.1:9234
synchronize-k8s-nodes:
----
true
dnsproxy-enable-transparent-mode:
----
true
enable-bpf-clock-probe:
----
false
enable-endpoint-health-checking:
----
true
enable-k8s-networkpolicy:
----
true
identity-heartbeat-timeout:
----
30m0s
k8s-client-burst:
----
10
vtep-mac:
----

cnp-node-status-gc-interval:
----
0s
custom-cni-conf:
----
false
enable-auto-protect-node-port-range:
----
true
enable-ipv6:
----
false
proxy-connect-timeout:
----
2
proxy-prometheus-port:
----
9964
tofqdns-proxy-response-max-delay:
----
100ms
bpf-map-dynamic-size-ratio:
----
0.0025
cluster-name:
----
default
enable-ipv4-big-tcp:
----
false
install-no-conntrack-iptables-rules:
----
false
cgroup-root:
----
/run/cilium/cgroupv2
enable-health-check-nodeport:
----
true
ipam-cilium-node-update-rate:
----
15s
unmanaged-pod-watcher-interval:
----
15
debug:
----
false
external-envoy-proxy:
----
false
monitor-aggregation-flags:
----
all
proxy-max-connection-duration-seconds:
----
0
arping-refresh-period:
----
30s
bpf-lb-map-max:
----
65536
cni-log-file:
----
/var/run/cilium/cilium-cni.log
debug-verbose:
----

vtep-mask:
----

bpf-lb-external-clusterip:
----
false
cni-exclusive:
----
true
enable-l2-neigh-discovery:
----
true
set-cilium-node-taints:
----
true
node-port-bind-protection:
----
true
proxy-max-requests-per-connection:
----
0
vtep-endpoint:
----

disable-cnp-status-updates:
----
true
enable-ipv6-masquerade:
----
true
enable-svc-source-range-check:
----
true
identity-gc-interval:
----
15m0s
skip-cnp-status-startup-clean:
----
false
vtep-cidr:
----

write-cni-conf-when-ready:
----
/host/etc/cni/net.d/05-cilium.conflist
bpf-root:
----
/sys/fs/bpf
enable-local-redirect-policy:
----
false
k8s-client-qps:
----
5
mesh-auth-rotated-identities-queue-size:
----
1024
enable-xt-socket-fallback:
----
true
monitor-aggregation-interval:
----
5s
sidecar-istio-proxy-image:
----
cilium/istio_proxy
bpf-lb-sock:
----
false
egress-gateway-reconciliation-trigger-interval:
----
1s
enable-sctp:
----
false
enable-well-known-identities:
----
false
agent-not-ready-taint-key:
----
node.cilium.io/agent-not-ready
cluster-id:
----
0
identity-allocation-mode:
----
crd
mesh-auth-gc-interval:
----
5m0s
remove-cilium-node-taints:
----
true
tofqdns-dns-reject-response-code:
----
refused
tofqdns-endpoint-max-ip-per-hostname:
----
50
enable-ipv6-big-tcp:
----
false
enable-k8s-terminating-endpoint:
----
true
enable-l7-proxy:
----
true
enable-vtep:
----
false
tofqdns-idle-connection-grace-period:
----
0s
tunnel-port:
----
6082
enable-ipv4-masquerade:
----
true
ipam:
----
cluster-pool
kube-proxy-replacement:
----
disabled
mesh-auth-queue-size:
----
1024
bpf-policy-map-max:
----
16384
cluster-pool-ipv4-mask-size:
----
24
enable-bgp-control-plane:
----
false
enable-ipv4:
----
true
routing-mode:
----
tunnel
tofqdns-max-deferred-connection-deletes:
----
10000
mesh-auth-enabled:
----
true
nodes-gc-interval:
----
5m0s
procfs:
----
/host/proc
tunnel-protocol:
----
geneve

BinaryData
====

Events:  <none>