fix: hubble ui indentation

roles/rke2/defaults/main.yml

@@ -61,22 +61,44 @@ default_manifests:
       enabled: false
       user: ""
       password: ""
-    ui:
-      enabled: "{{ manifests['config-rke2-cilium'].hubble.enabled | default(false) }}"
-      ingress:
+    cilium: #advanced here
+      bandwidthManager: true
+      debug:
         enabled: true
-        hosts:
-        - "{{ manifests['config-rke2-cilium'].hubble.hostname | default('example.org') }}"
-        tls: 
-        - secretName: hubble-cilium-tls
-          hosts:
-          - "{{ manifests['config-rke2-cilium'].hubble.hostname | default('example.org') }}"
-        annotations:
-          nginx.ingress.kubernetes.io/auth-type: basic
-          cert-manager.io/cluster-issuer: "{{ manifests['deploy-cert-manager'].clusterissuer | default('test@example.org') }}"
-          nginx.ingress.kubernetes.io/auth-secret: hubble-auth-secret
-          nginx.ingress.kubernetes.io/auth-secret-type: auth-file
-          nginx.ingress.kubernetes.io/auth-realm: "Authentication Required - hubble"
+      preflight:
+        enabled: false
+      bpf:
+        clockProbe: true
+      containerRuntime:
+        integration: auto
+      hubble:
+        metrics:
+          enabled:
+          - dns:query;ignoreAAAA
+          - drop
+          - tcp
+          - flow
+          - icmp
+          - http
+        relay:
+          enabled: true
+        ui:
+          enabled: "{{ manifests['config-rke2-cilium'].hubble.enabled | default(false) }}"
+          ingress:
+            enabled: true
+            hosts:
+            - "{{ manifests['config-rke2-cilium'].hubble.hostname | default('example.org') }}"
+            tls:
+            - secretName: hubble-cilium-tls
+              hosts:
+              - "{{ manifests['config-rke2-cilium'].hubble.hostname | default('example.org') }}"
+            annotations:
+              nginx.ingress.kubernetes.io/auth-type: basic
+              cert-manager.io/cluster-issuer: "{{ manifests['deploy-cert-manager'].clusterissuer | default('please-provide-issuer') }}"
+              nginx.ingress.kubernetes.io/auth-secret: hubble-auth-secret
+              nginx.ingress.kubernetes.io/auth-secret-type: auth-file
+              nginx.ingress.kubernetes.io/auth-realm: "Hubble Authentication Required"
+
 
   config-nginx-ingress:
     enabled: false

roles/rke2/templates/manifests/config-rke2-cilium.j2

@@ -21,28 +21,5 @@ metadata:
   namespace: kube-system
 spec:
   valuesContent: |-
-    cilium:
-      bandwidthManager: true
-      debug:
+{% set content = {"cilium": item.value.cilium} %}
+{{ content | to_nice_yaml | indent(4, true)  }}
\ No newline at end of file
-        enabled: true
-      preflight:
-        enabled: false
-      bpf:
-        clockProbe: true
-      containerRuntime:
-        integration: auto
-      hubble:
-        metrics:
-          enabled:
-          - dns:query;ignoreAAAA
-          - drop
-          - tcp
-          - flow
-          - icmp
-          - http
-        relay:
-          enabled: true
-{% if item.value.ui.enabled %}
-{% set ui = {"ui": item.value.ui} %}
-      {{ ui | to_nice_yaml(indent=8) }}
-{% endif %}
\ No newline at end of file