feat(cilium): enable maglev loadBalancer

Maglev Consistent Hashing should improve resiliency in case of failures https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/\#maglev-consistent-hashing

k8s/infra/network/cilium/values.yaml

@@ -9,8 +9,8 @@ k8sServiceHost: localhost
 k8sServicePort: 7445
 securityContext:
   capabilities:
-    ciliumAgent: [ CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID ]
+    ciliumAgent: [ CHOWN, KILL, NET_ADMIN, NET_RAW, IPC_LOCK, SYS_ADMIN, SYS_RESOURCE, DAC_OVERRIDE, FOWNER, SETGID, SETUID ]
-    cleanCiliumState: [ NET_ADMIN,SYS_ADMIN,SYS_RESOURCE ]
+    cleanCiliumState: [ NET_ADMIN, SYS_ADMIN, SYS_RESOURCE ]
 
 cgroup:
   autoMount:
@@ -57,16 +57,17 @@ externalIPs:
 
 enableCiliumEndpointSlice: true
 
+loadBalancer:
+  # https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#maglev-consistent-hashing
+  algorithm: maglev
+
 gatewayAPI:
   enabled: true
 envoy:
   securityContext:
     capabilities:
       keepCapNetBindService: true
-      envoy:
+      envoy: [ NET_ADMIN, PERFMON, BPF ]
-        - NET_ADMIN
-        - PERFMON
-        - BPF
 
 hubble:
   enabled: true
@@ -79,6 +80,11 @@ hubble:
 
 ingressController:
   enabled: false
+  default: true
+  loadbalancerMode: shared
+  service:
+    annotations:
+      io.cilium/lb-ipam-ips: 192.168.1.223
 
 # mTLS
 authentication: