# autoDirectNodeRoutes: true
cluster:
    name: main
    id: "1"
securityContext:
    privileged: true
    capabilities:
        ciliumAgent: '{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}'
        cleanCiliumState: '{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}'
cgroup:
    autoMount:
        enabled: false
    hostRoot: /sys/fs/cgroup
endpointRoutes:
    enabled: true
ipam:
    mode: kubernetes
kubeProxyReplacement: true
kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
k8sServiceHost: localhost
k8sServicePort: 7445
ipv4NativeRoutingCIDR: 172.16.0.0/16
operator:
    rollOutPods: true
rollOutCiliumPods: true
hubble:
    enabled: true
    metrics:
        enabled:
            - dns:query;ignoreAAAA
            - drop
            - tcp
            - flow
            - port-distribution
            - icmp
            - http
    relay:
        enabled: true
        rollOutPods: true
    ui:
        enabled: true
        rollOutPods: true
        ingress:
            enabled: false