feat: first pieces of HAproxy support

admin/libhelm.sh

@@ -3,6 +3,8 @@
 # Simulate well-known CRDs being available
 API_VERSIONS="-a monitoring.coreos.com/v1 -a snapshot.storage.k8s.io/v1 -a policy/v1/PodDisruptionBudget"
 
+export HELM_SECRETS_BACKEND="vals"
+
 #VERSION="latest"
 VERSION="v1.28"
 

charts/kubezero-network/README.md

@@ -60,6 +60,7 @@ Kubernetes: `>= 1.26.0`
 | cilium.resources.requests.cpu | string | `"10m"` |  |
 | cilium.resources.requests.memory | string | `"256Mi"` |  |
 | cilium.tunnelProtocol | string | `"geneve"` |  |
+| haproxy.enabled | bool | `false` |  |
 | metallb.controller.nodeSelector."node-role.kubernetes.io/control-plane" | string | `""` |  |
 | metallb.controller.tolerations[0].effect | string | `"NoSchedule"` |  |
 | metallb.controller.tolerations[0].key | string | `"node-role.kubernetes.io/control-plane"` |  |

charts/kubezero-network/values.yaml

@@ -71,6 +71,7 @@ cilium:
       enabled: false
     hostRoot: "/sys/fs/cgroup"
 
+  routingMode: tunnel
   tunnelProtocol: geneve
 
   prometheus:

charts/kubezero/templates/network.yaml

@@ -31,11 +31,16 @@ cilium:
       serviceMonitor:
         enabled: {{ .Values.metrics.enabled }}
 
-{{- with index .Values "network" "metallb" }}
+{{- with .Values.network.metallb }}
 metallb:
   {{- toYaml . | nindent 2 }}
 {{- end }}
 
+{{- with .Values.network.haproxy }}
+haproxy:
+  {{- toYaml . | nindent 2 }}
+{{- end }}
+
 {{- end }}