Cilium BGP support

[fmunteanu]

Existing Issues

• I have searched the existing issues

Related Problem

I'm waiting on UniFi to release the BGP feature for UDM SE, they made a reference into their Network 8.1.113 release, planned to be released with Network 8.2. Once released, I will be able to test and implement Cilium's BGP Control Plane.

Solution Implementation

Implementation example, to expose kube-apiserver:

apiVersion: v1
kind: Service
metadata:
  annotations:
    io.cilium/lb-ipam-ips: 192.168.4.15
  name: cilium-api-server
  namespace: kube-system
spec:
  externalTrafficPolicy: Local
  loadBalancerClass: io.cilium/bgp-control-plane
  ports:
    - name: https
      port: 443
      protocol: TCP
      targetPort: 6443
  selector:
    k8s-app: kube-apiserver
    tier: control-plane
  type: LoadBalancer

Solution Alternatives

No response

Anything Else

No response

Code of Conduct

• I agree to follow project's Code of Conduct

[mitchross]

Is it going to be a requirement that the consumers of this repo have to have a BGP enabled router?

[fmunteanu]

No, it will be a Cilium chart option for BGP capable routers.

[fmunteanu]

BGP support was implemented into Network, but it requires UniFi Gateway 4.1+. So far, version 4.0.6 was released.