apiVersion: cilium.io/v2
kind: CiliumBGPAdvertisement
metadata:
  name: bgp-advertisement
  labels:
    bgp.cilium.io/advertise: "true"
spec:
  advertisements:
    - advertisementType: "Service"
      service:
        addresses:
          - LoadBalancerIP
      selector:
        matchLabels: {}
---

apiVersion: "cilium.io/v2"
kind: CiliumBGPPeerConfig
metadata:
  name: "upstream-router-peer"
spec:
  families:
    - afi: ipv4
      safi: unicast
      advertisements:
        matchLabels:
          bgp.cilium.io/advertise: "true"
  gracefulRestart:
    enabled: true
    restartTimeSeconds: 120

---

apiVersion: cilium.io/v2
kind: CiliumBGPClusterConfig
metadata:
  name: "rke2-cluster-bgp"
spec:
  nodeSelector: {}
  bgpInstances:
    - name: "homelab-cluster"
      localASN: 65200
      peers:
        - name: "unifi-router"
          peerAddress: 192.168.120.1
          peerASN: 65100  # Hier gehört die Remote-ASN jetzt hin!
          peerConfigRef:
            name: upstream-router-peer

---
apiVersion: "cilium.io/v2"
kind: CiliumLoadBalancerIPPool
metadata:
  name: "cilium-loadbalancer-pool"
spec:
  blocks:
    - cidr: {{ .Values.rawCidr | replace "-" "/" }}
  serviceSelector:
    matchLabels: {}