Devin Buhl
c17d543b21
* refactor!: flux is required again Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: delimiter that chomps Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: bootstrap_cloudflare logic Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update tests Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: remove last quote Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
38 lines
1.0 KiB
YAML
38 lines
1.0 KiB
YAML
---
|
|
# https://docs.cilium.io/en/latest/network/bgp-control-plane/
|
|
apiVersion: cilium.io/v2alpha1
|
|
kind: CiliumBGPPeeringPolicy
|
|
metadata:
|
|
name: policy
|
|
spec:
|
|
nodeSelector:
|
|
matchLabels:
|
|
kubernetes.io/os: linux
|
|
virtualRouters:
|
|
- localASN: #{ bootstrap_bgp.local_asn }#
|
|
neighbors:
|
|
#% if bootstrap_bgp.peers %#
|
|
#% for item in bootstrap_bgp.peers %#
|
|
- peerAddress: "#{ item }#/32"
|
|
peerASN: #{ bootstrap_bgp.peer_asn }#
|
|
#% endfor %#
|
|
#% else %#
|
|
#% if bootstrap_node_default_gateway %#
|
|
- peerAddress: "#{ bootstrap_node_default_gateway }#/32"
|
|
#% else %#
|
|
- peerAddress: "#{ bootstrap_node_network | nthhost(1) }#/32"
|
|
#% endif %#
|
|
peerASN: #{ bootstrap_bgp.peer_asn }#
|
|
#% endif %#
|
|
serviceSelector:
|
|
matchExpressions:
|
|
- {key: somekey, operator: NotIn, values: ['never-used-value']}
|
|
---
|
|
apiVersion: cilium.io/v2alpha1
|
|
kind: CiliumLoadBalancerIPPool
|
|
metadata:
|
|
name: pool
|
|
spec:
|
|
cidrs:
|
|
- cidr: "${BGP_ADVERTISED_CIDR}"
|