deployment:
  kind: DaemonSet
  minReadySeconds: 120
hostNetwork: true
ports:
  web:
    port: 80
    redirectTo:
      port: "websecure"
  websecure:
    port: 443
  metrics:
    port: 9101
securityContext:
  capabilities:
    drop: [ALL]
    add: [NET_BIND_SERVICE]
  readOnlyRootFilesystem: true
  runAsGroup: 0
  runAsNonRoot: false
  runAsUser: 0

service:
  type: NodePort
  ipFamilyPolicy: PreferDualStack

updateStrategy:
  type: RollingUpdate
  rollingUpdate:
    maxUnavailable: 1
    maxSurge: 0

ingressRoute:
  dashboard:
    enabled: true
    matchRule: Host(`traefik.services.yolokube.de`)
    entryPoints: ["traefik", "websecure"]
    middlewares:
      - name: basic-auth
    tls:
      secretName: traefik-tls-key