---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: traefik
  namespace: kube-system
spec:
  chart:
    spec:
      chart: traefik
      sourceRef:
        kind: HelmRepository
        name: traefik
        namespace: flux-system
      version: '38.0.1'
  install:
    crds: Create
  interval: 6h
  releaseName: traefik
  upgrade:
    crds: CreateReplace
  values:
    deployment:
      enabled: true

    hostNetwork: true
    dnsPolicy: ClusterFirstWithHostNet

    service:
      enabled: false

    securityContext:
      capabilities:
        add:
          - NET_BIND_SERVICE
      readOnlyRootFilesystem: true
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
      fsGroup: 0

    nodeSelector:
      traefik: "true"

    ports:
      web:
        port: 80
        exposedPort: 80
        protocol: TCP
        expose:
          default: true

      websecure:
        port: 443
        exposedPort: 443
        protocol: TCP
        expose:
          default: true

    providers:
      kubernetesCRD: {}
      kubernetesIngress: {}