From 26457b89ede50e830076d5408c2adbc916eff1cb Mon Sep 17 00:00:00 2001
From: Devin Buhl <devin@buhl.casa>
Date: Tue, 11 Jul 2023 13:37:29 -0400
Subject: [PATCH] fix: include `localRedirectPolicy` in cilium helmrelease

Signed-off-by: Devin Buhl <devin@buhl.casa>
---
 .../cilium/app/helmrelease.yaml.j2            | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/template/templates/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml.j2 b/template/templates/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml.j2
index ad6cf25c..a88d01a3 100644
--- a/template/templates/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml.j2
+++ b/template/templates/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml.j2
@@ -78,6 +78,16 @@ spec:
     ipv4NativeRoutingCIDR: "{{ bootstrap_cluster_cidr }}"
     kubeProxyReplacement: strict
     kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
+    # https://github.com/cilium/cilium/issues/26586
+    l2announcements:
+      enabled: true
+      leaseDuration: 30s
+      leaseRenewDeadline: 10s
+      leaseRetryPeriod: 4s
+    loadBalancer:
+      algorithm: maglev
+      mode: dsr
+    localRedirectPolicy: true
     operator:
       replicas: 1
       rollOutPods: true
@@ -90,15 +100,6 @@ spec:
       serviceMonitor:
         enabled: true
     rollOutCiliumPods: true
-    # https://github.com/cilium/cilium/issues/26586
-    l2announcements:
-      enabled: true
-      leaseDuration: 30s
-      leaseRenewDeadline: 10s
-      leaseRetryPeriod: 4s
-    loadBalancer:
-      algorithm: maglev
-      mode: dsr
     securityContext:
       privileged: true
     tunnel: disabled