---
metadata:
  namespace: kube-system
data:
  etcd-config: |-
    ---
    endpoints:
      - https://cilium-etcd-client.kube-system.svc:2379
    #
    # In case you want to use TLS in etcd, uncomment the 'ca-file' line
    # and create a kubernetes secret by following the tutorial in
    # https://cilium.link/etcd-config
    ca-file: '/var/lib/etcd-secrets/etcd-client-ca.crt'
    #
    # In case you want client to server authentication, uncomment the following
    # lines and create a kubernetes secret by following the tutorial in
    # https://cilium.link/etcd-config
    key-file: '/var/lib/etcd-secrets/etcd-client.key'
    cert-file: '/var/lib/etcd-secrets/etcd-client.crt'

  # If you want to run cilium in debug mode change this value to true
  debug: "true"

  enable-ipv4: "true"
  enable-ipv6: "true"

---
metadata:
  namespace: kube-system
data:
  etcd-config: |-
    ---
    endpoints:
      - https://cilium-etcd-client.kube-system.svc:2379
    #
    # In case you want to use TLS in etcd, uncomment the 'ca-file' line
    # and create a kubernetes secret by following the tutorial in
    # https://cilium.link/etcd-config
    ca-file: '/var/lib/etcd-secrets/etcd-client-ca.crt'
    #
    # In case you want client to server authentication, uncomment the following
    # lines and create a kubernetes secret by following the tutorial in
    # https://cilium.link/etcd-config
    key-file: '/var/lib/etcd-secrets/etcd-client.key'
    cert-file: '/var/lib/etcd-secrets/etcd-client.crt'

  # If you want to run cilium in debug mode change this value to true
  debug: "true"

  enable-ipv4: "true"
  enable-ipv6: "true"
  preallocate-bpf-maps: "true"

Enable BPF preallocation by default
test: Enable BPF preallocation by default

Enable the upcoming BPF preallocation by default in the tests, so that
upgrade can be undertaken with minimal impact. Note that if this option
is toggled during upgrade, then it may have adverse effects.

This is being added because when it is set to false, the k8s upgrade
test is regularly failing, likely because the deletion of existing maps
causes etcd connectivity issues, which requires the etcd operator to
delete the pods and recreate them to get back into a good state. This
typically takes longer than the timeouts specified in the upgrade test,
causing the test to fail.

Further investigation is required to establish the exact behaviour for
toggling this option and how to safely enable/disable it; and also to
test the behaviour.

Signed-off-by: Joe Stringer <16a9a54ddf4259952e3c118c763138e83693d7fd@cilium.io>
