modified: services/cilium/deploy/app/helm-values.yaml

modified:   services/cilium/deploy/app/helm-values.yaml
new file:   services/cilium/deploy/policies/traefik-l2.yaml

services/cilium/deploy/README.md

@@ -30,7 +30,8 @@ kubectl get CiliumLoadBalancerIPPool -A
 **Force helm:**
 
 ```bash
-helm upgrade --install cilium oci://quay.io/cilium/cilium \
+helm repo add cilium https://helm.cilium.io/
+helm upgrade cilium cilium/cilium \
 --version 1.19.5 \
 -f ./deploy/app/helm-values.yaml \
 --namespace cilium 

services/cilium/deploy/app/helm-values.yaml

@@ -14,4 +14,19 @@ ipam:
 l2announcements:
   enabled: true
 loadBalancer:
-  mode: hybrid
+  mode: hybrid
+
+operator:
+  replicas: 1
+  #nodeSelector:
+  #   kubernetes.io/hostname: chimera
+  # tolerations:
+  #     # Tolerate the node-role.kubernetes.io/control-plane taint so the controller can run on master node chimera
+  #   - key: node-role.kubernetes.io/control-plane
+  #     operator: Exists
+  #     effect: NoSchedule
+
+# fix error="listen tcp :30913: bind: address already in use" in agent      
+nodePort:
+  enableHealthCheck: false
+  enableHealthCheckLoadBalancerIP: false

services/cilium/deploy/policies/traefik-l2.yaml

@@ -0,0 +1,14 @@
+apiVersion: cilium.io/v2alpha1
+kind: CiliumL2AnnouncementPolicy
+metadata:
+  name: traefik-l2
+spec:
+  interfaces:
+    - ens18
+  serviceSelector:
+    matchLabels:
+      app.kubernetes.io/name: traefik
+  # nodeSelector:
+  #   matchLabels:
+  #     traefik-node: "true"
+