refactor: add l2 announcements and lb ipam to cilium

ansible/inventories/bare_metal/group_vars/all.yaml

@@ -5,3 +5,5 @@ vip_interface: eno1
 vip_address: 10.0.0.200
 cluster_pod_subnet: 172.16.0.0/16
 cluster_service_subnet: 10.96.0.0/16
+lb_pool_start: 10.0.0.210
+lb_pool_stop: 10.0.0.220

ansible/inventories/incus/group_vars/all.yaml

@@ -4,3 +4,5 @@ vip_interface: enp5s0
 vip_address: 10.150.0.100
 cluster_pod_subnet: 172.16.0.0/16
 cluster_service_subnet: 10.96.0.0/16
+lb_pool_start: 10.150.0.210
+lb_pool_stop: 10.150.0.220

ansible/roles/kubernetes_cilium/defaults/main.yaml

@@ -0,0 +1,14 @@
+cilium_chart_version: 1.19.5
+
+cilium_values:
+  ipam:
+    operator:
+      clusterPoolIPv4PodCIDRList:
+        - "{{ cluster_pod_subnet }}"
+  hubble:
+    relay:
+      enabled: true
+    ui:
+      enabled: true
+  l2announcements:
+    enabled: true

ansible/roles/kubernetes_cilium/tasks/main.yaml

@@ -8,15 +8,20 @@
     release_name: cilium
     release_namespace: kube-system
     chart_ref: cilium/cilium
-    chart_version: 1.19.5
+    chart_version: "{{ cilium_chart_version }}"
-    values:
+    values: "{{ cilium_values }}"
-      ipam:
+  run_once: true
-        operator:
+
-          clusterPoolIPv4PodCIDRList:
+- name: Ensure LoadBalancer IP pool exists
-            - "{{ cluster_pod_subnet }}"
+  kubernetes.core.k8s:
-      hubble:
+    state: present
-        relay:
+    definition:
-          enabled: true
+      apiVersion: cilium.io/v2
-        ui:
+      kind: CiliumLoadBalancerIPPool
-          enabled: true
+      metadata:
+        name: homelab-pool
+      spec:
+        blocks:
+          - start: "{{ lb_pool_start }}"
+            stop: "{{ lb_pool_stop }}"
   run_once: true