deployment: kind: DaemonSet minReadySeconds: 120 hostNetwork: true ports: web: port: 80 redirectTo: port: "websecure" websecure: port: 443 metrics: port: 9101 securityContext: capabilities: drop: [ALL] add: [NET_BIND_SERVICE] readOnlyRootFilesystem: true runAsGroup: 0 runAsNonRoot: false runAsUser: 0 service: type: NodePort ipFamilyPolicy: PreferDualStack updateStrategy: type: RollingUpdate rollingUpdate: maxUnavailable: 1 maxSurge: 0 ingressRoute: dashboard: enabled: true matchRule: Host(`traefik.services.yolokube.de`) entryPoints: ["traefik", "websecure"] middlewares: - name: basic-auth tls: secretName: traefik-tls-key