feat: Enable cilium dsr

apps/lldap/base/cluster-restore.yaml

@@ -0,0 +1,16 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: lldap-db
+spec:
+  bootstrap:
+    recovery:
+      source: source
+  externalClusters:
+    - name: source
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: garage-store
+          serverName: lldap-db
+  plugins: []

apps/lldap/base/kustomization.yaml

@@ -9,3 +9,9 @@ resources:
   - http-route.yaml
   - secret-s3-garage.yaml
   - object-store.yaml
+
+# Uncomment to restore database from backup
+# patches:
+#   - path: cluster-restore.yaml
+#     target:
+#       kind: Cluster

clusters/testing/kustomization.yaml

@@ -10,6 +10,7 @@ resources:
   - ../../controllers/local-path-provisioner/local-path-provisioner.yaml
   - ../../controllers/cnpg/cnpg.yaml
   - ../../controllers/reflector/reflector.yaml
+  - ../../controllers/lldap-controller/lldap-controller.yaml
 
   - ../../configs/artifacts.yaml
   - ../../configs/cilium-config/cilium-config.yaml

controllers/cilium/base/values.yaml

@@ -29,3 +29,5 @@ gatewayAPI:
   enabled: true
   enableAlpn: true
   enableAppProtocol: true
+loadBalancer:
+  mode: dsr

controllers/lldap-controller/lldap-controller.yaml

@@ -0,0 +1,28 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
+metadata:
+  name: lldap-controller
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  url: oci://git.huizinga.dev/infra/lldap-controller/manifests
+  ref:
+    tag: edge
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: lldap-controller
+  namespace: flux-system
+spec:
+  interval: 1h
+  retryInterval: 2m
+  timeout: 5m
+  dependsOn:
+    - name: lldap
+  sourceRef:
+    kind: OCIRepository
+    name: lldap-controller
+  path: ./
+  prune: true
+  wait: true