chore(cilium): Limit l2adv to workers

2026-01-28 12:24:57 +01:00 · 2026-01-28 12:24:57 +01:00 · e70262ee6c
commit e70262ee6c
parent c5d2ccf365
2 changed files with 4 additions and 10 deletions
--- a/kustomize-bases/cilium/l2-advertisement.yaml
+++ b/kustomize-bases/cilium/l2-advertisement.yaml
@ -5,3 +5,7 @@ metadata:
  name: l2adv
 spec:
  loadBalancerIPs: true
+  nodeSelector:
+    matchExpressions:
+      - key: node-role.kubernetes.io/control-plane
+        operator: DoesNotExist
--- a/kustomize-bases/cilium/values.yaml
+++ b/kustomize-bases/cilium/values.yaml
@ -42,16 +42,6 @@ hubble:
  ui:
    enabled: true

-envoy:
-  enabled: true
-  securityContext:
-    capabilities:
-      keepCapNetBindService: true
-      envoy:
-      - NET_ADMIN
-      - SYS_ADMIN
-      - NET_BIND_SERVICE
-
 gatewayAPI:
  enabled: true
  enableAlpn: true