Cannot use the cilium-cli version/cilium-cli hubble enable

[suppergriff]

Environmental Info:
RKE2 Version: v1.27.10 +rke2r1

Node(s) CPU architecture, OS, and Version: Linux rke2-100-31 4.18.0-513.11.1.el8_9.0.1.x86_64 #1 SMP Sun Feb 11 10:42:18 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux

Cluster Configuration:3 server 2 agents

Describe the bug:

Cannot use the cilium-cli version/cilium-cli hubble enable
Steps To Reproduce:

• Installed RKE2: by rancher ui create rke2 cluster and cni is cilium

Expected behavior:

use the cilium-cli version, and cilium-cli enable hubble

Actual behavior:

**Additional context / logs:**

[brandond]

Don't do that. You should enable features via rke2-cilium HelmChartConfig.

https://docs.rke2.io/helm#customizing-packaged-components-with-helmchartconfig
https://github.com/rancher/rke2-charts/blob/main/charts/rke2-cilium/rke2-cilium/1.15.100/values.yaml#L992-L994

[suppergriff]

maybe I want to use cilium-cli other feature， such as bgp，such as hubble service monitor， it is extremely complex to use helmchart 'rke2-cilium'

[brandond]

You're welcome to deploy RKE2 with cni: none and then install Cilium on your own, but if you deploy it using our helm chart, you should use our helm chart to configure it.

There's not much more to it other than providing values in HelmChartConfig, it should be quite easy to do declaratively.

[suppergriff]

There's not much more to it other than providing values in HelmChartConfig, it should be quite easy to do declaratively.

Got it， thank you

[rbrtbnfgl]

You could use the cilium-cli with our deployed cilium if you patch the https://github.com/cilium/cilium-cli code with this

diff --git a/defaults/defaults.go b/defaults/defaults.go
index de8d1005..ae76e7f3 100644
--- a/defaults/defaults.go
+++ b/defaults/defaults.go
@@ -126,7 +126,7 @@ const (
        IngressSecretsNamespace = "cilium-secrets"
 
        // HelmReleaseName is the default Helm release name for Cilium.
-       HelmReleaseName               = "cilium"
+       HelmReleaseName               = "rke2-cilium"
        HelmValuesSecretName          = "cilium-cli-helm-values"
        HelmValuesSecretKeyName       = "io.cilium.cilium-cli"
        HelmChartVersionSecretKeyName = "io.cilium.chart-version"

Cilium with rke2 starts with hubble disabled by default so even if you try cilium hubble enable you'll get an error. To enable hubble you have to configure the cilium chart with

apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: rke2-cilium
  namespace: kube-system
spec:
  valuesContent: |-
    hubble:
      enabled: true

Hubble will be enabled but it will not start until you use cilium hubble enable.