diff --git a/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml b/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml index 90398a2dd..88397a2b1 100644 --- a/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml +++ b/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml @@ -118,9 +118,22 @@ spec: virtualRouters: - localASN: 65184 exportPodCIDR: true + # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector + # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements + serviceSelector: + matchExpressions: + - {key: somekey, operator: NotIn, values: ['never-used-value']} neighbors: - peerAddress: "192.168.3.254/32" peerASN: 65184 + eBGPMultihopTTL: 10 + connectRetryTimeSeconds: 120 + holdTimeSeconds: 90 + keepAliveTimeSeconds: 30 + gracefulRestart: + enabled: true + restartTimeSeconds: 120 + --- apiVersion: "cilium.io/v2alpha1" kind: CiliumBGPPeeringPolicy @@ -133,10 +146,21 @@ spec: virtualRouters: - localASN: 65184 exportPodCIDR: true + # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector + # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements serviceSelector: + matchExpressions: + - {key: somekey, operator: NotIn, values: ['never-used-value']} neighbors: - peerAddress: "192.168.3.254/32" peerASN: 65184 + eBGPMultihopTTL: 10 + connectRetryTimeSeconds: 120 + holdTimeSeconds: 90 + keepAliveTimeSeconds: 30 + gracefulRestart: + enabled: true + restartTimeSeconds: 120 --- apiVersion: "cilium.io/v2alpha1" kind: CiliumBGPPeeringPolicy @@ -149,9 +173,21 @@ spec: virtualRouters: - localASN: 65184 exportPodCIDR: true + # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector + # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements + serviceSelector: + matchExpressions: + - {key: somekey, operator: NotIn, values: ['never-used-value']} neighbors: - peerAddress: "192.168.3.254/32" peerASN: 65184 + eBGPMultihopTTL: 10 + connectRetryTimeSeconds: 120 + holdTimeSeconds: 90 + keepAliveTimeSeconds: 30 + gracefulRestart: + enabled: true + restartTimeSeconds: 120 --- apiVersion: "cilium.io/v2alpha1" kind: CiliumBGPPeeringPolicy @@ -164,9 +200,21 @@ spec: virtualRouters: - localASN: 65184 exportPodCIDR: true + # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector + # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements + serviceSelector: + matchExpressions: + - {key: somekey, operator: NotIn, values: ['never-used-value']} neighbors: - peerAddress: "192.168.3.254/32" peerASN: 65184 + eBGPMultihopTTL: 10 + connectRetryTimeSeconds: 120 + holdTimeSeconds: 90 + keepAliveTimeSeconds: 30 + gracefulRestart: + enabled: true + restartTimeSeconds: 120 --- apiVersion: "cilium.io/v2alpha1" kind: CiliumBGPPeeringPolicy @@ -179,9 +227,21 @@ spec: virtualRouters: - localASN: 65184 exportPodCIDR: true + # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector + # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements + serviceSelector: + matchExpressions: + - {key: somekey, operator: NotIn, values: ['never-used-value']} neighbors: - peerAddress: "192.168.3.254/32" peerASN: 65184 + eBGPMultihopTTL: 10 + connectRetryTimeSeconds: 120 + holdTimeSeconds: 90 + keepAliveTimeSeconds: 30 + gracefulRestart: + enabled: true + restartTimeSeconds: 120 --- apiVersion: "cilium.io/v2alpha1" kind: CiliumBGPPeeringPolicy @@ -194,7 +254,19 @@ spec: virtualRouters: - localASN: 65184 exportPodCIDR: true + # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector + # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements + serviceSelector: + matchExpressions: + - {key: somekey, operator: NotIn, values: ['never-used-value']} neighbors: - peerAddress: "192.168.3.254/32" peerASN: 65184 + eBGPMultihopTTL: 10 + connectRetryTimeSeconds: 120 + holdTimeSeconds: 90 + keepAliveTimeSeconds: 30 + gracefulRestart: + enabled: true + restartTimeSeconds: 120 ---