Enable separate Envoy daemonset by default for Cilium 1.17 and newer

With Cilium 1.17 the separate Envoy daemonset is also supported on
OpenShift, so we can enable it by default.

Author: simu

class/defaults.yml

@@ -33,9 +33,6 @@ parameters:
         confPath: /var/run/multus/cni/net.d
       endpointRoutes:
         enabled: true
-      # Make <=1.15 behavior (embedded envoy) explicit
-      envoy:
-        enabled: false
       hubble:
         metrics:
           enabled:

component/render-helm-values.jsonnet

@@ -113,8 +113,15 @@ local rewriteLBIPAMRequireLBClass =
   else
     {};
 
+local envoyDefault = {
+  envoy: {
+    enabled: util.version.minor > 16,
+  },
+};
+
 local cilium_values = std.prune(
   rewriteLBIPAMRequireLBClass +
+  envoyDefault +
   com.makeMergeable(params.cilium_helm_values) +
   replaceDeprecatedIPv4PodCIDR +
   renderPodCIDRList +

tests/golden/olm-enterprise/cilium/cilium/olm/cluster-network-07-cilium-ciliumconfig.yaml

@@ -26,7 +26,7 @@ spec:
     egressGatewayHA:
       enabled: false
   envoy:
-    enabled: false
+    enabled: true
   hubble:
     metrics:
       enabled: