update cilium

Tiltfile

@@ -22,13 +22,29 @@ docker_build_with_restart(IMG, '.',
 )
 
 # Cilium CNI
-helm_remote('cilium',
-            version="1.15.0-pre.1",
-            namespace="kube-system",
-            repo_name='cilium',
-            values=['./test/cilium/helm-values.yaml'],
-            repo_url='https://helm.cilium.io')
-k8s_yaml('./test/cilium/dual-stack/crd-values.yaml')
+helm_remote(
+    'cilium',
+    version="1.16.3",
+    namespace="kube-system",
+    repo_name='cilium',
+    values=['./test/cilium/helm-values.yaml'],
+    repo_url='https://helm.cilium.io'
+)
+
+# Create a local resource that waits for Cilium's deployment to be complete
+local_resource(
+    'cilium_wait',
+    cmd='echo "Waiting for Cilium..."',
+    resource_deps=['cilium'],
+    deps=['./test/cilium/helm-values.yaml']
+)
+
+local_resource(
+    'lb_crds',
+    cmd='kubectl apply -f ./test/cilium/dual-stack/crd-values.yaml',
+    resource_deps=['cilium_wait'],
+    deps=['./test/cilium/dual-stack/crd-values.yaml']
+)
 
 # Cert-manager
 helm_remote('cert-manager',

test/cilium/dual-stack/crd-values.yaml

@@ -4,10 +4,9 @@ kind: CiliumLoadBalancerIPPool
 metadata:
   name: default
 spec:
-  cidrs:
+  blocks:
     - cidr: 198.51.100.0/24
     - cidr: fd12:3456:789a:1::/64
-
 ---
 apiVersion: cilium.io/v2alpha1
 kind: CiliumL2AnnouncementPolicy

test/cilium/helm-values.yaml

@@ -2,8 +2,6 @@ bpf:
   masquerade: true
 cluster:
   name: local
-containerRuntime:
-  integration: containerd
 endpointRoutes:
   enabled: true
 enableCiliumEndpointSlice: true
@@ -15,16 +13,8 @@ gatewayAPI:
 l7Proxy: true
 l2announcements:
   enabled: true
-ipv4NativeRoutingCIDR: 10.42.0.0/16
 ipam:
-  mode: "cluster-pool"
-  operator:
-    clusterPoolIPv4PodCIDRList:
-      - "10.43.0.0/16"
-    clusterPoolIPv4MaskSize: 24
-    # clusterPoolIPv6PodCIDRList:
-    #   - "fd00::/104"
-    # clusterPoolIPv6MaskSize: 120
+  mode: "kubernetes"
 kubeProxyReplacement: true
 kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
 k8sServiceHost: 127.0.0.1
@@ -55,4 +45,3 @@ securityContext:
       - NET_ADMIN
       - SYS_ADMIN
       - SYS_RESOURCE
-tunnel: disabled