add bgp routing

clusters/cl01tl/standalone/cilium/templates/cilium-bgp-advertisement.yaml

@@ -0,0 +1,16 @@
+apiVersion: cilium.io/v2alpha1
+kind: CiliumBGPAdvertisement
+metadata:
+  name: cilium-bgp-advertisements
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: cilium-bgp-advertisements
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    advertise: bgp
+spec:
+  advertisements:
+    - advertisementType: "Service"
+      service:
+        addresses:
+          - LoadBalancerIP

clusters/cl01tl/standalone/cilium/templates/cilium-bgp-cluster-config.yaml

@@ -0,0 +1,22 @@
+apiVersion: cilium.io/v2alpha1
+kind: CiliumBGPClusterConfig
+metadata:
+  name: cilium-bgp
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: cilium-bgp
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  nodeSelector:
+    matchLabels:
+      node-role.kubernetes.io/bgp: "65020"
+  bgpInstances:
+    - name: "65020"
+      localASN: 65020
+      peers:
+        - name: "udm-65000"
+          peerASN: 65000
+          peerAddress: 192.168.1.1
+          peerConfigRef:
+            name: "cilium-peer"

clusters/cl01tl/standalone/cilium/templates/cilium-bgp-peer-config.yaml

@@ -0,0 +1,19 @@
+apiVersion: cilium.io/v2alpha1
+kind: CiliumBGPPeerConfig
+metadata:
+  name: cilium-peer
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: cilium-peer
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  gracefulRestart:
+    enabled: true
+    restartTimeSeconds: 15
+  families:
+    - afi: ipv4
+      safi: unicast
+      advertisements:
+        matchLabels:
+          advertise: "bgp"

clusters/cl01tl/standalone/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2alpha1
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: default-l2-announcement-policy
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: default-l2-announcement-policy
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  interfaces:
-    - enp6s0
-  externalIPs: true
-  loadBalancerIPs: true

clusters/cl01tl/standalone/cilium/values.yaml

@@ -26,7 +26,15 @@ cilium:
         - SYS_ADMIN
         - SYS_RESOURCE
   l2announcements:
+    enabled: false
+  bgpControlPlane:
     enabled: true
+    secretsNamespace:
+      name: kube-system
+    statusReport:
+      enabled: true
+    routerIDAllocation:
+      mode: "default"
   devices: end0 enp6s0
   enableK8sEndpointSlice: true
   ciliumEndpointSlice: