bugfix: enable strict arp for metallb

https://metallb.universe.tf/installation/
kubernetes-sigs/kubespray@29f10af
metallb/metallb#153 (comment)

kubernetes/kustomization.yaml

@@ -5,6 +5,7 @@ generators:
 resources:
   - https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.8.2/deploy/static/provider/cloud/deploy.yaml
   - https://github.com/cert-manager/cert-manager/releases/download/v1.14.1/cert-manager.yaml
+  - ./metallb
   - ./clusterissuer.yaml
   - ./archivebox
   - ./datasette

terraform/oracle/templates/provision-cluster.sh.tmpl

@@ -71,7 +71,7 @@ echo "metallb_config:
 # The option `--become` is required, as for example writing SSL keys in /etc/,
 # installing packages and interacting with various systemd daemons.
 # Without --become the playbook will fail to run!
-ansible-playbook -i inventory/main/hosts.yaml  --become --become-user=root cluster.yml
+ansible-playbook -i inventory/main/hosts.yaml -e kube_network_plugin=cilium -e kube_proxy_strict_arp=true --become --become-user=root cluster.yml
 
 mkdir -p "$HOME"/.kube
 sudo cp -fv /etc/kubernetes/admin.conf "$HOME"/.kube/config