全てのServiceIPとLoadBalancerIPをBGPで広報する

GiganticMinecraft · Dec 5, 2023 · e4826df · e4826df
1 parent 30dd448
commit e4826df
Showing 1 changed file with 72 additions and 0 deletions.
diff --git a/...-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml b/...-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml
@@ -118,9 +118,22 @@ spec:
   virtualRouters:
   - localASN: 65184
     exportPodCIDR: true
+    # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector
+    # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements
+    serviceSelector:
+      matchExpressions:
+         - {key: somekey, operator: NotIn, values: ['never-used-value']}
     neighbors:
     - peerAddress: "192.168.3.254/32"
       peerASN: 65184
+      eBGPMultihopTTL: 10
+      connectRetryTimeSeconds: 120
+      holdTimeSeconds: 90
+      keepAliveTimeSeconds: 30
+      gracefulRestart:
+        enabled: true
+        restartTimeSeconds: 120
+
 ---
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumBGPPeeringPolicy
@@ -133,10 +146,21 @@ spec:
   virtualRouters:
   - localASN: 65184
     exportPodCIDR: true
+    # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector
+    # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements
     serviceSelector:
+      matchExpressions:
+         - {key: somekey, operator: NotIn, values: ['never-used-value']}
     neighbors:
     - peerAddress: "192.168.3.254/32"
       peerASN: 65184
+      eBGPMultihopTTL: 10
+      connectRetryTimeSeconds: 120
+      holdTimeSeconds: 90
+      keepAliveTimeSeconds: 30
+      gracefulRestart:
+        enabled: true
+        restartTimeSeconds: 120
 ---
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumBGPPeeringPolicy
@@ -149,9 +173,21 @@ spec:
   virtualRouters:
   - localASN: 65184
     exportPodCIDR: true
+    # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector
+    # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements
+    serviceSelector:
+      matchExpressions:
+         - {key: somekey, operator: NotIn, values: ['never-used-value']}
     neighbors:
     - peerAddress: "192.168.3.254/32"
       peerASN: 65184
+      eBGPMultihopTTL: 10
+      connectRetryTimeSeconds: 120
+      holdTimeSeconds: 90
+      keepAliveTimeSeconds: 30
+      gracefulRestart:
+        enabled: true
+        restartTimeSeconds: 120
 ---
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumBGPPeeringPolicy
@@ -164,9 +200,21 @@ spec:
   virtualRouters:
   - localASN: 65184
     exportPodCIDR: true
+    # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector
+    # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements
+    serviceSelector:
+      matchExpressions:
+         - {key: somekey, operator: NotIn, values: ['never-used-value']}
     neighbors:
     - peerAddress: "192.168.3.254/32"
       peerASN: 65184
+      eBGPMultihopTTL: 10
+      connectRetryTimeSeconds: 120
+      holdTimeSeconds: 90
+      keepAliveTimeSeconds: 30
+      gracefulRestart:
+        enabled: true
+        restartTimeSeconds: 120
 ---
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumBGPPeeringPolicy
@@ -179,9 +227,21 @@ spec:
   virtualRouters:
   - localASN: 65184
     exportPodCIDR: true
+    # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector
+    # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements
+    serviceSelector:
+      matchExpressions:
+         - {key: somekey, operator: NotIn, values: ['never-used-value']}
     neighbors:
     - peerAddress: "192.168.3.254/32"
       peerASN: 65184
+      eBGPMultihopTTL: 10
+      connectRetryTimeSeconds: 120
+      holdTimeSeconds: 90
+      keepAliveTimeSeconds: 30
+      gracefulRestart:
+        enabled: true
+        restartTimeSeconds: 120
 ---
 apiVersion: "cilium.io/v2alpha1"
 kind: CiliumBGPPeeringPolicy
@@ -194,7 +254,19 @@ spec:
   virtualRouters:
   - localASN: 65184
     exportPodCIDR: true
+    # 全てのServiceIPとLoadBalancerIPを広報するためのおまじない的なserviceSelector
+    # https://docs.cilium.io/en/stable/network/bgp-control-plane/#service-announcements
+    serviceSelector:
+      matchExpressions:
+         - {key: somekey, operator: NotIn, values: ['never-used-value']}
     neighbors:
     - peerAddress: "192.168.3.254/32"
       peerASN: 65184
+      eBGPMultihopTTL: 10
+      connectRetryTimeSeconds: 120
+      holdTimeSeconds: 90
+      keepAliveTimeSeconds: 30
+      gracefulRestart:
+        enabled: true
+        restartTimeSeconds: 120
 ---