From 1ddecb1cef65c9715ed66b6c335634bc51f59613 Mon Sep 17 00:00:00 2001
From: Dalton Hubble <dghubble@gmail.com>
Date: Fri, 23 Aug 2024 07:15:18 -0700
Subject: [PATCH] Change Cilium configuration to use kube-proxy replacement

* Skip creating the kube-proxy DaemonSet when Cilium is chosen
---
 manifests.tf                 | 2 +-
 resources/cilium/config.yaml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifests.tf b/manifests.tf
index e4047cf..fc57714 100644
--- a/manifests.tf
+++ b/manifests.tf
@@ -56,7 +56,7 @@ locals {
           pod_cidr              = var.pod_cidr
           daemonset_tolerations = var.daemonset_tolerations
         }
-      ) if var.components.enable && var.components.kube_proxy.enable
+      ) if var.components.enable && var.components.kube_proxy.enable && var.networking != "cilium"
     }
   )
 }
diff --git a/resources/cilium/config.yaml b/resources/cilium/config.yaml
index 6ff7d81..f896ab7 100644
--- a/resources/cilium/config.yaml
+++ b/resources/cilium/config.yaml
@@ -127,8 +127,8 @@ data:
   enable-bpf-masquerade: "true"
 
   # kube-proxy
-  kube-proxy-replacement:  "false"
-  kube-proxy-replacement-healthz-bind-address: ""
+  kube-proxy-replacement:  "true"
+  kube-proxy-replacement-healthz-bind-address: ":10256"
   enable-session-affinity: "true"
 
   # ClusterIPs from host namespace