feat(bgp): enable bgp in cilium and disable l2 announcements

Change IP of all LB Services to a different subnet

Use externalTrafficPolicy on some LB Services

Signed-off-by: Vegard Hagen <[email protected]>

k8s/apps/dev/whoami/svc.yaml

@@ -4,9 +4,13 @@ metadata:
   name: whoami
   namespace: whoami
   annotations:
-    io.cilium/lb-ipam-ips: 192.168.1.223
+    io.cilium/lb-ipam-ips: 172.20.10.200
+  labels:
+    bgp.cilium.io/advertise-service: default
+    bgp.cilium.io/ip-pool: default
 spec:
   type: LoadBalancer
+  externalTrafficPolicy: Local
   selector:
     app: whoami
   ports:

k8s/apps/external/proxmox/svc.yaml

@@ -8,4 +8,5 @@ spec:
     - name: https
       protocol: TCP
       port: 443
+      appProtocol: kubernetes.io/h2c
       targetPort: 8006

k8s/apps/external/truenas/svc.yaml

@@ -8,3 +8,4 @@ spec:
     - name: https
       protocol: TCP
       port: 443
+      appProtocol: kubernetes.io/h2c

k8s/apps/media/plex/kustomization.yaml

@@ -8,7 +8,7 @@ configMapGenerator:
     namespace: plex
     literals:
       - TZ="Europe/Oslo"
-      - PLEX_ADVERTISE_URL=https://plex.stonegarden.dev:443,http://192.168.1.228:32400
+      - PLEX_ADVERTISE_URL=https://plex.stonegarden.dev:443
 
 resources:
   - ns.yaml

k8s/apps/utils/torrent/svc-torrent.yaml

@@ -4,9 +4,13 @@ metadata:
   name: torrent-torrent
   namespace: torrent
   annotations:
-    io.cilium/lb-ipam-ips: 192.168.1.225
+    io.cilium/lb-ipam-ips: 172.20.10.250
+  labels:
+    bgp.cilium.io/advertise-service: default
+    bgp.cilium.io/ip-pool: default
 spec:
   type: LoadBalancer
+  externalTrafficPolicy: Local
   selector:
     app: torrent
   ports:

k8s/apps/utils/unpoller/config/up.conf

@@ -26,7 +26,7 @@
   dynamic = false
 
 [unifi.defaults]
-  url = "https://192.168.1.1"
+  url = "https://172.20.10.1"
 
   user = "unifipoller"
   pass = "file:///mnt/secrets/password"