metallb

apps/production/metallb/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: metallb-system
+resources:
+  - namespace.yaml
+  - ipaddresspool.yaml
+  - l2advertisement.yaml

apps/production/metallb/l2advertisement.yaml

@@ -0,0 +1,5 @@
+apiVersion: metallb.io/v1beta1
+kind: L2Advertisement
+metadata:
+  name: default
+  namespace: metallb-system

apps/production/metallb/namespace.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: metallb-system
+  labels:
+    security.openshift.io/scc.podSecurityLabelSync: "false"
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/audit: privileged

apps/production/traefik/traefik-patch.yaml

@@ -11,12 +11,13 @@ spec:
           args:
             - "--entryPoints.web.address=:8000/tcp"
             - "--entryPoints.websecure.address=:8443/tcp"
-            - "--entryPoints.traefik.address=:9000/tcp"
-            - "--api=true"
-            - "--api.dashboard=true"
             - "--ping=true"
+            - "--global.sendanonymoususage=false"
+            - "--global.checknewversion=false"
+            - "--serversTransport.insecureSkipVerify=true"
+            - "--log.level=INFO"
             - "--providers.kubernetescrd"
             - "--providers.kubernetescrd.allowCrossNamespace=true"
-            - "--certificatesresolvers.myresolver.acme.storage=/data/acme.json"
-            - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
-            - "--certificatesresolvers.myresolver.acme.email=jakub.hajek+webinar@traefik.io"
+            - "--providers.kubernetescrd.allowExternalNameServices=true"
+            - "--providers.kubernetesingress.allowCrossNamespace=true"
+            - "--providers.kubernetesingress.allowExternalNameServices=true"