k8sServiceHost: localhost
k8sServicePort: 7445
kubeProxyReplacement: true

ipam:
  mode: kubernetes

l2announcements:
  enabled: true

cgroup:
  hostRoot: /sys/fs/cgroup
  autoMount:
    enabled: false

securityContext:
  capabilities:
    ciliumAgent:
      - CHOWN
      - KILL
      - NET_ADMIN
      - NET_RAW
      - IPC_LOCK
      - SYS_ADMIN
      - SYS_RESOURCE
      - DAC_OVERRIDE
      - FOWNER
      - SETGID
      - SETUID
      - CAP_SYS_ADMIN
    cleanCiliumState:
      - NET_ADMIN
      - SYS_ADMIN
      - SYS_RESOURCE

operator:
  replicas: 1

hubble:
  relay:
    enabled: true
  ui:
    enabled: true

gatewayAPI:
  enabled: true
  enableAlpn: true
  enableAppProtocol: true