apiVersion: cilium.io/v2
kind: CiliumLoadBalancerIPPool
metadata:
  name: lb-pool
spec:
  blocks:
    - cidr: 10.90.141.119/16
---
apiVersion: cilium.io/v2
kind: CiliumBGPPeerConfig
metadata:
  name: opnsense-peer-settings
spec:
  ebgpMultihop: 10
  gracefulRestart:
    enabled: true
    restartTimeSeconds: 15
  families:
    - afi: ipv4
      safi: unicast
      advertisements:
        matchLabels:
          advertise: "opnsense-policy" 
---
apiVersion: cilium.io/v2
kind: CiliumBGPClusterConfig
metadata:
  name: bgp-to-opnsense
spec:
  nodeSelector:
    matchLabels: {} 
  bgpInstances:
    - name: "cilium"
      localASN: 64513
      peers:
        - name: "opnsense-router"
          peerASN: 64512
          peerAddress: "10.77.102.91"
          peerConfigRef:
            name: "opnsense-peer-settings"
---
apiVersion: cilium.io/v2
kind: CiliumBGPAdvertisement
metadata:
  name: advertise-selected-services
  labels:
    advertise: "opnsense-policy" 
spec:
  advertisements:
    - advertisementType: "Service"
      service:
        addresses:
          - LoadBalancerIP
      selector:
        matchExpressions:
          - key: io.cilium/bgp-announce
            operator: Exists
    - advertisementType: "Service"
      service:
        addresses:
          - LoadBalancerIP
      selector:
        matchExpressions:
          - key: gateway.networking.k8s.io/gateway-name
            operator: Exists