---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: traefik
  namespace: kube-system
spec:
  chart:
    spec:
      chart: traefik
      sourceRef:
        kind: HelmRepository
        name: traefik
        namespace: flux-system
      version: '39.0.0'
  install:
    crds: Create
  interval: 6h
  releaseName: traefik
  upgrade:
    crds: CreateReplace
  values:
    deployment:
      enabled: true
      kind: DaemonSet
    updateStrategy:
      type: OnDelete

    hostNetwork: true
    dnsPolicy: ClusterFirstWithHostNet

    service:
      enabled: false

    securityContext:
      capabilities:
        add:
          - NET_BIND_SERVICE
      readOnlyRootFilesystem: true
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
      fsGroup: 0

    ports:
      web:
        port: 80
        exposedPort: 80
        protocol: TCP
        expose:
          default: true
        http:
          encodedCharacters:
            allowEncodedSlash: true
            allowEncodedQuestionMark: true

      websecure:
        port: 443
        exposedPort: 443
        protocol: TCP
        expose:
          default: true
        http:
          encodedCharacters:
            allowEncodedSlash: true
            allowEncodedQuestionMark: true

      ssh:
        port: 22
        exposedPort: 22
        protocol: TCP
        expose:
          default: true

      metrics:
        port: 9101
        exposedPort: 9101
        protocol: TCP
        expose:
          default: false

      traefik:
        port: 8081
        exposedPort: 8081
        protocol: TCP
        expose:
          default: false

    providers:
      kubernetesCRD: {}
      kubernetesIngress: {}