fix(cilium): Announce ARP on all interfaces

apps/media/plex/deployment.yaml

@@ -25,7 +25,7 @@ spec:
             - configMapRef:
                 name: plex-env
           ports:
-            - name: web
+            - name: http
               containerPort: 32400
           volumeMounts:
             - name: config

apps/media/plex/http-route.yaml

@@ -15,4 +15,4 @@ spec:
             value: /
       backendRefs:
         - name: plex
-          port: 32400
+          port: 80

apps/media/plex/ingress.yaml

@@ -10,4 +10,4 @@ spec:
       kind: Rule
       services:
         - name: plex
-          port: 32400
+          port: 80

apps/media/plex/kustomization.yaml

@@ -20,4 +20,4 @@ resources:
   - service.yaml
   - deployment.yaml
   - ingress.yaml
-#  - http-route.yaml
+  - http-route.yaml

apps/media/plex/service.yaml

@@ -2,10 +2,13 @@ apiVersion: v1
 kind: Service
 metadata:
   name: plex
+  annotations:
+    io.cilium/lb-ipam-ips: 192.168.1.132
 spec:
   selector:
     app: plex
   type: LoadBalancer
   ports:
-    - name: web
-      port: 32400
+    - name: http
+      port: 80
+      targetPort: 32400

apps/test/cuda-test/pod.yaml

@@ -4,10 +4,10 @@ metadata:
   name: cuda-vectoradd
   namespace: cuda-test
 spec:
-  restartPolicy: OnFailure
+  restartPolicy: Never #OnFailure
   containers:
     - name: cuda-vectoradd
       image: "nvcr.io/nvidia/k8s/cuda-sample:vectoradd-cuda11.7.1-ubuntu20.04"
-      resources:
-        limits:
-          nvidia.com/gpu: "1"
+#      resources:
+#        limits:
+#          nvidia.com/gpu: "1"

infra/argocd/kustomization.yaml

@@ -13,7 +13,7 @@ helmCharts:
 resources:
   - namespace.yaml
   - traefik-forward-auth-secrets.yaml
-  - https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.2/manifests/install.yaml
+  - https://raw.githubusercontent.com/argoproj/argo-cd/v2.10.0/manifests/install.yaml
   - ingress.yaml
   - argocd-cm-cmp-kustomize-build-with-helm.yaml
 

infra/cilium/announce.yaml

@@ -4,7 +4,5 @@ metadata:
   name: default-l2-announcement-policy
   namespace: kube-system
 spec:
-  interfaces:
-    - enp0s25
   externalIPs: true
   loadBalancerIPs: true

infra/cilium/ip-pool.yaml

@@ -4,5 +4,6 @@ metadata:
   name: default-pool
   namespace: kube-system
 spec:
-  cidrs:
-    - cidr: 192.168.1.128/25
+  blocks:
+    - start: 192.168.1.128
+      stop: 192.168.1.199

infra/cilium/values.yaml

@@ -15,12 +15,12 @@ operator:
 # Roll out cilium agent pods automatically when ConfigMap is updated.
 rollOutCiliumPods: true
 
-#debug:
-#  enabled: true
+debug:
+  enabled: true
 
 # Increase rate limit when doing L2 announcements
 k8sClientRateLimit:
-  qps: 100
+  qps: 50
   burst: 200
 
 l2announcements:

infra/net-aux/config/cloudflared/config.yaml

@@ -9,14 +9,6 @@ warp-routing:
 ingress:
   - hostname: hello.stonegarden.dev
     service: hello_world
-  - hostname: hallo.stonegarden.dev
-    service: hello_world
-    originRequest:
-      access:
-        required: true
-        teamName: stonegarden
-        audTag:
-          - aud1 d34ec64c62e56195ac6158dbfbeae62155d110f5c3a3b7e949572916dc57a6f3
   - hostname: ssh.stonegarden.dev
     service: ssh://192.168.1.12:22
   - hostname: blog.stonegarden.dev

infra/net-aux/config/pi-hole/02-custom.conf

@@ -1,9 +1,9 @@
-address=/stonegarden.dev/192.168.1.142
+#address=/stonegarden.dev/192.168.1.142
 address=/blog.stonegarden.dev/192.168.1.172
 address=/gateway.stonegarden.dev/192.168.1.172
 address=/hass.stonegarden.dev/192.168.1.172
 address=/jellyfin.stonegarden.dev/192.168.1.172
-#address=/plex.stonegarden.dev/192.168.1.172
+address=/plex.stonegarden.dev/192.168.1.172
 address=/postgres.stonegarden.dev/192.168.1.172
 address=/remark42.stonegarden.dev/192.168.1.172
 edns-packet-max=1232

infra/nvidia-device-plugin/kustomization.yaml

@@ -5,13 +5,13 @@ commonAnnotations:
 
 resources:
   - namespace.yaml
-  - cm-time-slicing.yaml
+#  - cm-time-slicing.yaml
 
-helmCharts:
-  - name: nvidia-device-plugin
-    repo: https://nvidia.github.io/k8s-device-plugin
-    version: 0.14.3
-    releaseName: "nvidia-device-plugin"
-    namespace: nvidia-device-plugin
-    includeCRDs: true
-    valuesFile: values.yaml
+#helmCharts:
+#  - name: nvidia-device-plugin
+#    repo: https://nvidia.github.io/k8s-device-plugin
+#    version: 0.14.3
+#    releaseName: "nvidia-device-plugin"
+#    namespace: nvidia-device-plugin
+#    includeCRDs: true
+#    valuesFile: values.yaml

infra/pi-hole/config/02-custom.conf

@@ -1,9 +1,9 @@
-address=/stonegarden.dev/192.168.1.142
+#address=/stonegarden.dev/192.168.1.142
 address=/blog.stonegarden.dev/192.168.1.172
 address=/gateway.stonegarden.dev/192.168.1.172
 address=/hass.stonegarden.dev/192.168.1.172
 address=/jellyfin.stonegarden.dev/192.168.1.172
-#address=/plex.stonegarden.dev/192.168.1.172
+address=/plex.stonegarden.dev/192.168.1.172
 address=/postgres.stonegarden.dev/192.168.1.172
 address=/remark42.stonegarden.dev/192.168.1.172
 edns-packet-max=1232