Add the cilium network plugin to the kubernetes role, disabling servicelb, and collect the disabled k3s components in one disable list

kubernetes/templates/k3s/server/config.yaml.jinja2

@@ -1,3 +1,5 @@
+{% set disabled_components = [] %}
+
 ## Base ##
 node-name: {{ ansible_fqdn }}
 {% if inventory_hostname == groups['kubernetes'][0] %}
@@ -46,11 +48,15 @@ flannel-backend: vxlan
 {% else %}
 disable-network-policy: true
 flannel-backend: none
+{% if kubernetes.network.plugin == "cilium" %}
+  # Cilium requires servicelb to be disabled when replacing kube-proxy
+  {% set _ = disabled_components.append('servicelb') %}
+{% endif %}
 {% endif %}
 
 # Ingress-plugin
 {% if kubernetes.ingress_controller != "traefik-ingress" %}
-disable: traefik
+{% set _ = disabled_components.append('traefik') %}
 {% endif %}
 
 ## Label
@@ -68,6 +74,11 @@ node-label:
 {% endfor %}
 {% endif %}
 
+# Disabled components
+{% if disabled_components %}
+disable: {{ disabled_components | join(',') }}
+{% endif %}
+
 {{ kubernetes.config_extra | to_yaml }}
 
 # Image garbage collection tuning (drop-in KubeletConfiguration)