Compare commits

Author SHA1 Message Date
Vezpi c269ff6549 Merge branch 'main' into feat/deploy-k8s-vms 2026-09-18 15:35:27 +02:00
Vezpi c343613b74 fix: remove cilium 4240 udp port 2026-09-18 13:33:49 +00:00
Vezpi a5b6b9d249 fix: admin subnet to VLAN 88 2026-09-16 05:58:02 +00:00
Vezpi 6c77ed2a1f add: patch Proxmox nag 2026-09-15 21:40:11 +00:00
Vezpi ee0f1c8c1c add: cilium firewall ports to open 2026-09-14 07:23:48 +00:00
Vezpi 57c42b94ea docs: create README.me 2026-09-12 20:39:00 +00:00
Vezpi d6ae654a80 add: master and worker count 2026-09-12 11:17:07 +00:00
Vezpi fa1be640f9 refactor: allow input variable 2026-09-12 11:05:24 +00:00
Vezpi 3057635198 fix: reduce vm name to one digit 2026-09-11 22:09:47 +00:00
Vezpi 8c2dd38e66 refactor: node selection based on resource 2026-09-11 22:02:55 +00:00
Vezpi 59e6c3ca63 add: ansible k8s_node role 2026-09-09 20:34:37 +00:00
Vezpi 4960bbc9fb refactor: file structure 2026-09-09 19:51:38 +00:00
Vezpi 080a67835f add: ansible inventory and test playbook 2026-09-09 19:34:54 +00:00
Vezpi fec0471881 refactor: add ssh password instead of key 2026-09-09 07:37:58 +00:00
Vezpi d19a2c3798 add: terraform project kubernetes_vms 2026-09-08 20:56:43 +00:00
-49
View File
@@ -1,49 +0,0 @@
---
apiVersion: cilium.io/v2
kind: CiliumBGPPeerConfig
metadata:
name: bgp-cilium-peers
spec:
timers:
holdTimeSeconds: 9
keepAliveTimeSeconds: 3
gracefulRestart:
enabled: true
restartTimeSeconds: 15
families:
- afi: ipv4
safi: unicast
advertisements:
matchLabels:
advertise: "bgp"
---
apiVersion: cilium.io/v2
kind: CiliumBGPClusterConfig
metadata:
name: bgp-opnsense
spec:
nodeSelector:
matchLabels:
kubernetes.io/role: "worker"
bgpInstances:
- name: "bgp-cilium-cluster"
localASN: 64513 # Cilium ASN
peers:
- name: "opnsense"
peerASN: 64512 # OPNsense ASN
peerAddress: 192.168.66.1 # OPNsense IP on the Lab network
peerConfigRef:
name: "bgp-cilium-peers"
---
apiVersion: cilium.io/v2
kind: CiliumBGPAdvertisement
metadata:
name: bgp-advertisement
labels:
advertise: bgp
spec:
advertisements:
- advertisementType: "Service"
service:
addresses:
- LoadBalancerIP