--- kubernetes/apps/kube-system/cilium/app Kustomization: flux-system/cilium HelmRelease: kube-system/cilium

+++ kubernetes/apps/kube-system/cilium/app Kustomization: flux-system/cilium HelmRelease: kube-system/cilium

@@ -29,13 +29,13 @@

       retries: 3
   values:
     autoDirectNodeRoutes: true
     bgpControlPlane:
       enabled: true
     bpf:
-      masquerade: false
+      masquerade: true
     cgroup:
       automount:
         enabled: false
       hostRoot: /sys/fs/cgroup
     cluster:
       id: 1

--- HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-config

+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-config

@@ -39,13 +39,13 @@

   service-no-backend-response: reject
   enable-l7-proxy: 'true'
   enable-ipv4-masquerade: 'true'
   enable-ipv4-big-tcp: 'false'
   enable-ipv6-big-tcp: 'false'
   enable-ipv6-masquerade: 'true'
-  enable-bpf-masquerade: 'false'
+  enable-bpf-masquerade: 'true'
   enable-masquerade-to-route-source: 'false'
   enable-xt-socket-fallback: 'true'
   install-no-conntrack-iptables-rules: 'false'
   auto-direct-node-routes: 'true'
   enable-local-redirect-policy: 'true'
   ipv4-native-routing-cidr: ${CLUSTER_CIDR}
--- HelmRelease: kube-system/cilium DaemonSet: kube-system/cilium

+++ HelmRelease: kube-system/cilium DaemonSet: kube-system/cilium

@@ -16,13 +16,13 @@

     rollingUpdate:
       maxUnavailable: 2
     type: RollingUpdate
   template:
     metadata:
       annotations:
-        cilium.io/cilium-configmap-checksum: 8fa343ce1819e13778427ee00914e56ea6c72569f665185b82e10a1ac8807723
+        cilium.io/cilium-configmap-checksum: f9c4f40fc7e8c907a6c7ad0a6829998cae1a7eb089925b17300de61eef610387
         container.apparmor.security.beta.kubernetes.io/cilium-agent: unconfined
         container.apparmor.security.beta.kubernetes.io/clean-cilium-state: unconfined
         container.apparmor.security.beta.kubernetes.io/mount-cgroup: unconfined
         container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites: unconfined
       labels:
         k8s-app: cilium
--- HelmRelease: kube-system/cilium Deployment: kube-system/cilium-operator

+++ HelmRelease: kube-system/cilium Deployment: kube-system/cilium-operator

@@ -20,13 +20,13 @@

       maxSurge: 25%
       maxUnavailable: 100%
     type: RollingUpdate
   template:
     metadata:
       annotations:
-        cilium.io/cilium-configmap-checksum: 8fa343ce1819e13778427ee00914e56ea6c72569f665185b82e10a1ac8807723
+        cilium.io/cilium-configmap-checksum: f9c4f40fc7e8c907a6c7ad0a6829998cae1a7eb089925b17300de61eef610387
       labels:
         io.cilium/app: operator
         name: cilium-operator
         app.kubernetes.io/part-of: cilium
         app.kubernetes.io/name: cilium-operator
     spec: