# Installs Cilium without writing the CNI config file.
# Flannel keeps serving pods on unmigrated nodes.
# TODO: Remove after migration
#cni:
  #customConf: false

# Routes cross-CNI traffic via the host network stack so Flannel pods
# and Cilium pods can reach each other during the transition.
# TODO: Remove after migration
#bpf:
  #hostLegacyRouting: false

# NOTE: Use Geneve so Cilium's overlay is distinct from Flannel's VXLAN.
# This is required for cross-CNI pod connectivity during migration.
routingMode: tunnel
tunnelProtocol: geneve

# New pod CIDR exclusively for Cilium (must not overlap):
# Flannel pod CIDR: 10.100.0.0/16  (clusterCidr in k8s config)
# Service CIDR:     10.0.0.0/22
# Node networks:    10.255.241.0/24, 10.255.242.0/24, 10.255.243.0/24, 10.255.244.0/24
# TODO: after migration switch ipam.mode to kubernetes
ipam:
  mode: cluster-pool
  operator:
    clusterPoolIPv4PodCIDRList:
      - "10.100.0.0/16"
    clusterPoolIPv4MaskSize: 24

# NOTE: Rate limit Cilium's k8s API client ekman has ~30 nodes.
k8sClientRateLimit:
  qps: 5
  burst: 10
