cilium:
  kubeProxyReplacement: strict
  k8sServiceHost: 192.168.1.8
  k8sServicePort: 6443
  operator:
    replicas: 1
  bpf:
    masquerade: true
  hubble:
    relay:
      enabled: true
    ui:
      enabled: true
      ingress:
        enabled: true
        annotations:
          kubernetes.io/ingress.class: nginx
          kubernetes.io/tls-acme: "true"
          cert-manager.io/cluster-issuer: letsencrypt
          nginx.ingress.kubernetes.io/auth-url: "https://oauth2.ioot.xyz/oauth2/auth"
          nginx.ingress.kubernetes.io/auth-signin: "https://oauth2.ioot.xyz/oauth2/start?rd=$scheme://$host$request_uri"
        hosts:
          - hubble.ioot.xyz
        tls:
          - hosts:
              - hubble.ioot.xyz
            secretName: hubble-tls