65 lines
1.4 KiB
YAML
65 lines
1.4 KiB
YAML
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumLoadBalancerIPPool
|
||
|
|
metadata:
|
||
|
|
name: lb-pool
|
||
|
|
spec:
|
||
|
|
blocks:
|
||
|
|
- cidr: 10.90.141.119/16
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumBGPPeerConfig
|
||
|
|
metadata:
|
||
|
|
name: opnsense-peer-settings
|
||
|
|
spec:
|
||
|
|
ebgpMultihop: 10
|
||
|
|
gracefulRestart:
|
||
|
|
enabled: true
|
||
|
|
restartTimeSeconds: 15
|
||
|
|
families:
|
||
|
|
- afi: ipv4
|
||
|
|
safi: unicast
|
||
|
|
advertisements:
|
||
|
|
matchLabels:
|
||
|
|
advertise: "opnsense-policy"
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumBGPClusterConfig
|
||
|
|
metadata:
|
||
|
|
name: bgp-to-opnsense
|
||
|
|
spec:
|
||
|
|
nodeSelector:
|
||
|
|
matchLabels: {}
|
||
|
|
bgpInstances:
|
||
|
|
- name: "cilium"
|
||
|
|
localASN: 64513
|
||
|
|
peers:
|
||
|
|
- name: "opnsense-router"
|
||
|
|
peerASN: 64512
|
||
|
|
peerAddress: "10.77.102.91"
|
||
|
|
peerConfigRef:
|
||
|
|
name: "opnsense-peer-settings"
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumBGPAdvertisement
|
||
|
|
metadata:
|
||
|
|
name: advertise-selected-services
|
||
|
|
labels:
|
||
|
|
advertise: "opnsense-policy"
|
||
|
|
spec:
|
||
|
|
advertisements:
|
||
|
|
- advertisementType: "Service"
|
||
|
|
service:
|
||
|
|
addresses:
|
||
|
|
- LoadBalancerIP
|
||
|
|
selector:
|
||
|
|
matchExpressions:
|
||
|
|
- key: io.cilium/bgp-announce
|
||
|
|
operator: Exists
|
||
|
|
- advertisementType: "Service"
|
||
|
|
service:
|
||
|
|
addresses:
|
||
|
|
- LoadBalancerIP
|
||
|
|
selector:
|
||
|
|
matchExpressions:
|
||
|
|
- key: gateway.networking.k8s.io/gateway-name
|
||
|
|
operator: Exists
|