Reenable bpf.masquerade

and now enable socketLB, which is requirement of bpf.masquerade

templates/cilium-values-1.15.6.yaml.j2

@@ -21,9 +21,9 @@ priorityClassName: {{ cilium_priorityClassName }}
 # -- Annotate k8s node upon initialization with Cilium's metadata.
 annotateK8sNode: true
 
-#bpf:
-#  # -- Enable native IP masquerade support in eBPF
-#  masquerade: true
+bpf:
+  # -- Enable native IP masquerade support in eBPF
+  masquerade: true
 
 ## -- Configure container runtime specific integration.
 ## Deprecated in favor of bpf.autoMount.enabled. To be removed in 1.15.
@@ -68,6 +68,12 @@ k8sNetworkPolicy:
   # -- Enable support for K8s NetworkPolicy
   enabled: true
 
+# -- Configure socket LB
+socketLB:
+  # -- Enable socket LB
+  # It must be enabled if bpf.masquerade=true
+  enabled: true
+
 hubble:
   # -- Enable Hubble (true by default).
   enabled: {{ cilium_hubble_enable }}
@@ -325,9 +331,7 @@ operator:
   rollOutPods: true
 
   # -- Number of replicas to run for the cilium-operator deployment
-  #replicas: 2
-  # Initially only the front is deployed so the second replica can not be allocated
-  replicas: 1
+  replicas: 2
 
   # -- The priority class to use for cilium-operator
   priorityClassName: {{ cilium_priorityClassName }}