fix(cilium): use dsr load-balancer mode

This should maybe fix issues with pinging VIPs https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#dsr-mode

Signed-off-by: Vegard Hagen <[email protected]>

Author: vehagn

k8s/infra/network/cilium/bgp-advertise-lb-services.yaml

@@ -10,6 +10,7 @@ spec:
       service:
         addresses:
           - LoadBalancerIP
+#          - ExternalIP
       selector:
         matchLabels:
           bgp.cilium.io/advertise-service: default

k8s/infra/network/cilium/values.yaml

@@ -71,6 +71,14 @@ externalIPs:
 loadBalancer:
   # https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#maglev-consistent-hashing
   algorithm: maglev
+  # https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#dsr-mode
+  mode: dsr
+#  l7:
+#    backend: envoy
+
+# The default "vxlan" is incompatible with loadBalancer.mode: "dsr".
+routingMode: native
+tunnelProtocol: ""
 
 gatewayAPI:
   enabled: true