From f959d83f507ea2bd2629b5db8d3605a8e3f43c01 Mon Sep 17 00:00:00 2001
From: Max Pfeiffer <max@maxpfeiffer.ch>
Date: Tue, 16 Sep 2025 20:03:46 +0200
Subject: [PATCH] Removed Gateway and added load balancer, ingress and egress
 features

Gateway API is still rather new, no time for experiments.
---
 proxmox/helm_templates.tf | 28 +++++++++++++++++++++++++---
 1 file changed, 25 insertions(+), 3 deletions(-)

diff --git a/proxmox/helm_templates.tf b/proxmox/helm_templates.tf
index 9a3d94d..cbc5cc9 100644
--- a/proxmox/helm_templates.tf
+++ b/proxmox/helm_templates.tf
@@ -38,16 +38,38 @@ data "helm_template" "cilium" {
       name  = "k8sServicePort"
       value = "7445"
     },
+    # Loadbalancer
+    # See: https://docs.cilium.io/en/stable/network/l2-announcements/
     {
-      name  = "gatewayAPI.enabled"
+      name  = "l2announcements.enabled"
       value = "true"
     },
     {
-      name  = "gatewayAPI.enableAlpn"
+      name  = "k8sClientRateLimit.qps"
+      value = "50"
+    },
+    {
+      name  = "k8sClientRateLimit.burst"
+      value = "100"
+    },
+    # Ingress Controller
+    # See: https://docs.cilium.io/en/stable/network/servicemesh/ingress/
+    {
+      name  = "ingressController.enabled"
       value = "true"
     },
     {
-      name  = "gatewayAPI.enableAppProtocol"
+      name  = "ingressController.loadbalancerMode"
+      value = "dedicated"
+    },
+    # Egress Gateway
+    # See: https://docs.cilium.io/en/stable/network/egress-gateway/egress-gateway/
+    {
+      name  = "egressGateway.enabled"
+      value = "true"
+    },
+    {
+      name  = "bpf.masquerade"
       value = "true"
     },
   ]