From 305ca06352aef7ebb056ee4eb60c5ec49785da56 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Mon, 9 Feb 2026 14:35:01 +0100
Subject: [PATCH] fix(cilium): Enable gateway api on hel1

---
 values/cilium/env-hel1.yaml.gotmpl      | 10 ++++++++++
 values/cilium/env.yaml.gotmpl           |  2 ++
 values/cilium/values/cilium.yaml.gotmpl | 16 ++++++++++++++++
 3 files changed, 28 insertions(+)
 create mode 100644 values/cilium/env-hel1.yaml.gotmpl

diff --git a/values/cilium/env-hel1.yaml.gotmpl b/values/cilium/env-hel1.yaml.gotmpl
new file mode 100644
index 00000000..0f2f672d
--- /dev/null
+++ b/values/cilium/env-hel1.yaml.gotmpl
@@ -0,0 +1,10 @@
+cilium:
+  enabled: true
+  nodePort:
+    enabled: true
+  l2announcement:
+    enabled: true
+  gatewayAPI:
+    enabled: true
+  gatewayTest:
+    enabled: true
diff --git a/values/cilium/env.yaml.gotmpl b/values/cilium/env.yaml.gotmpl
index 99f6c080..b15cb8db 100644
--- a/values/cilium/env.yaml.gotmpl
+++ b/values/cilium/env.yaml.gotmpl
@@ -19,6 +19,8 @@ cilium:
   # NOTE: Requires that ingresscontroller is also enabled
   gatewayAPI:
     enabled: false
+  gatewayTest:
+    enabled: false
   ingressController:
     enabled: false
     defaultClass: false
diff --git a/values/cilium/values/cilium.yaml.gotmpl b/values/cilium/values/cilium.yaml.gotmpl
index 14fe29bb..45eee644 100644
--- a/values/cilium/values/cilium.yaml.gotmpl
+++ b/values/cilium/values/cilium.yaml.gotmpl
@@ -61,6 +61,22 @@ nodePort:
   enabled: {{ .Values.cilium.nodePort.enabled }}
 gatewayAPI:
   enabled: {{ .Values.cilium.gatewayAPI.enabled }}
+{{- if .Values.cilium.gatewayTest.enabled }}
+  hostNetwork:
+    enabled: true
+    nodes:
+      matchLabels:
+        ingresshost: "cilium"
+envoy:
+  enabled: true
+  securityContext:
+    capabilities:
+      keepCapNetBindService: true
+      envoy:
+        - NET_ADMIN
+        - BPF
+        - NET_BIND_SERVICE
+{{- end}}
 ingressController:
   enabled: {{ .Values.cilium.ingressController.enabled }}
   default: {{ .Values.cilium.ingressController.defaultClass }}