From 8e644dd07aa5811db6c9d35b02c2f142f012b61b Mon Sep 17 00:00:00 2001
From: pgijsbertsen <117165507+pgijsbertsen@users.noreply.github.com>
Date: Sun, 18 Jan 2026 08:29:06 +0100
Subject: [PATCH] chore(cilium): Reconfigure with kubernetes ipam

---
 kustomize-bases/cilium/httproute.yaml | 2 --
 kustomize-bases/cilium/values.yaml    | 7 ++++---
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/kustomize-bases/cilium/httproute.yaml b/kustomize-bases/cilium/httproute.yaml
index a6efb80..c7de402 100644
--- a/kustomize-bases/cilium/httproute.yaml
+++ b/kustomize-bases/cilium/httproute.yaml
@@ -5,8 +5,6 @@ metadata:
   name: http-filter-redirect
 spec:
   parentRefs:
-    - name: public
-      sectionName: http
     - name: internal
       sectionName: http
   rules:
diff --git a/kustomize-bases/cilium/values.yaml b/kustomize-bases/cilium/values.yaml
index 7a465d4..a0d5317 100644
--- a/kustomize-bases/cilium/values.yaml
+++ b/kustomize-bases/cilium/values.yaml
@@ -2,6 +2,9 @@ k8sServiceHost: localhost
 k8sServicePort: 7445
 kubeProxyReplacement: true
 
+ipam:
+  mode: kubernetes
+
 cgroup:
   hostRoot: /sys/fs/cgroup
   autoMount:
@@ -21,6 +24,7 @@ securityContext:
       - FOWNER
       - SETGID
       - SETUID
+      - CAP_SYS_ADMIN
     cleanCiliumState:
       - NET_ADMIN
       - SYS_ADMIN
@@ -39,6 +43,3 @@ gatewayAPI:
   enabled: true
   enableAlpn: true
   enableAppProtocol: true
-
-enableIPv4Masquerade: true
-enableMasqueradeRouteSource: true