[BPF] CgroupV2Path override for operator installs

api/pkg/apis/projectcalico/v3/felixconfig.go

@@ -571,6 +571,8 @@ type FelixConfigurationSpec struct {
 	// resolution so that host can handle them. A typical usecase is node local
 	// DNS cache.
 	BPFExcludeCIDRsFromNAT *[]string `json:"bpfExcludeCIDRsFromNAT,omitempty" validate:"omitempty,cidrs"`
+	// CgroupV2Path overrides the default location where to find the cgroup hierarchy.
+	CgroupV2Path string `json:"cgrouV2Path,omitempty"`
 
 	// RouteSource configures where Felix gets its routing information.
 	// - WorkloadIPs: use workload endpoints to construct routes.

felix/config/config_params.go

@@ -205,6 +205,9 @@ type Config struct {
 	BPFDisableGROForIfaces             *regexp.Regexp    `config:"regexp;"`
 	BPFExcludeCIDRsFromNAT             []string          `config:"cidr-list;;"`
 
+	// CgroupV2Path is not used by Felix, but its init container
+	CgroupV2Path string `config:"string;;"`
+
 	// DebugBPFCgroupV2 controls the cgroup v2 path that we apply the connect-time load balancer to.  Most distros
 	// are configured for cgroup v1, which prevents all but the root cgroup v2 from working so this is only useful
 	// for development right now.

libcalico-go/lib/backend/syncersv1/updateprocessors/configurationprocessor_test.go

@@ -45,7 +45,7 @@ const (
 )
 
 const (
-	numBaseFelixConfigs = 136
+	numBaseFelixConfigs = 137
 )
 
 var _ = Describe("Test the generic configuration update processor and the concrete implementations", func() {