From 89354e5547f4b026332ad6f6b02fc056b6aade7c Mon Sep 17 00:00:00 2001
From: Vezpi <etienne.girault@gmail.com>
Date: Sun, 20 Sep 2026 20:25:19 +0000
Subject: [PATCH] add: cilium bgp config manifests

---
 kubernetes/cilium/bgp.yaml | 49 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 kubernetes/cilium/bgp.yaml

diff --git a/kubernetes/cilium/bgp.yaml b/kubernetes/cilium/bgp.yaml
new file mode 100644
index 0000000..157b874
--- /dev/null
+++ b/kubernetes/cilium/bgp.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: cilium.io/v2
+kind: CiliumBGPClusterConfig
+metadata:
+  name: bgp-opnsense
+spec:
+  nodeSelector:
+    matchLabels:
+      kubernetes.io/role: "worker"
+  bgpInstances:
+  - name: "bgp-cilium-peers"
+    localASN: 64513 # Cilium ASN
+    peers:
+    - name: "opnsense"
+      peerASN: 64512 # OPNsense ASN
+      peerAddress: 192.168.66.1  # OPNsense IP on the Lab network
+      peerConfigRef:
+        name: "bgp-opnsense"
+---
+apiVersion: cilium.io/v2alpha1
+kind: CiliumBGPPeerConfig
+metadata:
+  name: bgp-cilium-peers
+spec:
+  timers:
+    holdTimeSeconds: 9
+    keepAliveTimeSeconds: 3
+  gracefulRestart:
+    enabled: true
+    restartTimeSeconds: 15
+  families:
+    - afi: ipv4
+      safi: unicast
+      advertisements:
+        matchLabels:
+          advertise: "bgp"
+---
+apiVersion: cilium.io/v2alpha1
+kind: CiliumBGPAdvertisement
+metadata:
+  name: bgp-advertisement
+  labels:
+    advertise: bgp
+spec:
+  advertisements:
+    - advertisementType: "Service"
+      service:
+        addresses:
+          - LoadBalancerIP
\ No newline at end of file