ce7cb702218693d08ea6d83464d2457c9250027c

vendor/infrastructure/cilium/config/l2.yaml

@@ -0,0 +1,65 @@
+apiVersion: cilium.io/v2
+kind: CiliumLoadBalancerIPPool
+metadata:
+  name: lb-pool
+spec:
+  blocks:
+    - cidr: 10.90.141.119/16
+---
+apiVersion: cilium.io/v2
+kind: CiliumBGPPeerConfig
+metadata:
+  name: opnsense-peer-settings
+spec:
+  ebgpMultihop: 10
+  gracefulRestart:
+    enabled: true
+    restartTimeSeconds: 15
+  families:
+    - afi: ipv4
+      safi: unicast
+      advertisements:
+        matchLabels:
+          advertise: "opnsense-policy" 
+---
+apiVersion: cilium.io/v2
+kind: CiliumBGPClusterConfig
+metadata:
+  name: bgp-to-opnsense
+spec:
+  nodeSelector:
+    matchLabels: {} 
+  bgpInstances:
+    - name: "cilium"
+      localASN: 64513
+      peers:
+        - name: "opnsense-router"
+          peerASN: 64512
+          peerAddress: "10.77.102.91"
+          peerConfigRef:
+            name: "opnsense-peer-settings"
+---
+apiVersion: cilium.io/v2
+kind: CiliumBGPAdvertisement
+metadata:
+  name: advertise-selected-services
+  labels:
+    advertise: "opnsense-policy" 
+spec:
+  advertisements:
+    - advertisementType: "Service"
+      service:
+        addresses:
+          - LoadBalancerIP
+      selector:
+        matchExpressions:
+          - key: io.cilium/bgp-announce
+            operator: Exists
+    - advertisementType: "Service"
+      service:
+        addresses:
+          - LoadBalancerIP
+      selector:
+        matchExpressions:
+          - key: gateway.networking.k8s.io/gateway-name
+            operator: Exists