feat: add bootstrap_cilium_loadbalancer_mode config option and default to dsr

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/tasks/validation/vars.yaml

@@ -9,6 +9,7 @@
   loop:
     - bootstrap_acme_email
     - bootstrap_age_public_key
+    - bootstrap_cilium_loadbalancer_mode
     - bootstrap_cloudflare_account_tag
     - bootstrap_cloudflare_domain
     - bootstrap_cloudflare_token

bootstrap/templates/ansible/playbooks/templates/custom-cilium-helmchart.yaml.j2.j2

@@ -53,7 +53,7 @@ spec:
       {% endif %}
     loadBalancer:
       algorithm: maglev
-      mode: dsr
+      mode: {{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }}
     localRedirectPolicy: true
     operator:
       replicas: 1

bootstrap/templates/kubernetes/apps/kube-system/cilium/app/helmvalues.yaml.j2

@@ -79,7 +79,7 @@ data:
       {% endif %}
     loadBalancer:
       algorithm: maglev
-      mode: dsr
+      mode: {{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }}
     localRedirectPolicy: true
     operator:
       replicas: 1

bootstrap/vars/config.sample.yaml

@@ -47,6 +47,9 @@ bootstrap_external_ingress_addr:
 # The Load balancer IP for internal ingress, choose an available IP in your nodes network that is not being used
 bootstrap_internal_ingress_addr:
 
+# (Advanced) Cilium load balancer mode, choose either dsr or snat, if you nodes aren't on a network by themselves change this to snat
+bootstrap_cilium_loadbalancer_mode: dsr
+
 # Keep the next three options default unless you know what you are doing
 # (Advanced) Enable ipv6
 bootstrap_ipv6_enabled: false