helm-values/cert-manager.yaml

@@ -1,43 +0,0 @@
-# Global settings for nodeSelector and tolerations
-nodeSelector:
-  com.van-hemmen.role: gateway
-  com.van-hemmen.hosting: ovh
-
-tolerations:
-  - key: "com.van-hemmen.role"
-    operator: "Equal"
-    value: "gateway"
-    effect: "NoSchedule"
-
-# startupapicheck specific settings
-startupapicheck:
-  nodeSelector:
-    com.van-hemmen.role: gateway
-    com.van-hemmen.hosting: ovh
-  tolerations:
-    - key: "com.van-hemmen.role"
-      operator: "Equal"
-      value: "gateway"
-      effect: "NoSchedule"
-
-# Cainjector specific settings
-cainjector:
-  nodeSelector:
-    com.van-hemmen.role: gateway
-    com.van-hemmen.hosting: ovh
-  tolerations:
-    - key: "com.van-hemmen.role"
-      operator: "Equal"
-      value: "gateway"
-      effect: "NoSchedule"
-
-# Webhook specific settings
-webhook:
-  nodeSelector:
-    com.van-hemmen.role: gateway
-    com.van-hemmen.hosting: ovh
-  tolerations:
-    - key: "com.van-hemmen.role"
-      operator: "Equal"
-      value: "gateway"
-      effect: "NoSchedule"

helm-values/external-dns.yaml

@@ -1,8 +0,0 @@
-nodeSelector:
-  com.van-hemmen.role: gateway
-  com.van-hemmen.hosting: ovh
-tolerations:
-  - key: "com.van-hemmen.role"
-    operator: "Equal"
-    value: "gateway"
-    effect: "NoSchedule"

helm-values/metallb.yaml

@@ -1,19 +0,0 @@
-controller:
-  nodeSelector:
-    com.van-hemmen.role: gateway
-    com.van-hemmen.hosting: ovh
-  tolerations:
-    - key: "com.van-hemmen.role"
-      operator: "Equal"
-      value: "gateway"
-      effect: "NoSchedule"
-
-speaker:
-  nodeSelector:
-    com.van-hemmen.role: gateway
-    com.van-hemmen.hosting: ovh
-  tolerations:
-    - key: "com.van-hemmen.role"
-      operator: "Equal"
-      value: "gateway"
-      effect: "NoSchedule"

helm-values/traefik.yaml

@@ -1,8 +0,0 @@
-nodeSelector:
-  com.van-hemmen.role: gateway
-  com.van-hemmen.hosting: ovh
-tolerations:
-  - key: "com.van-hemmen.role"
-    operator: "Equal"
-    value: "gateway"
-    effect: "NoSchedule"

metallb-ressources.yaml

@@ -5,6 +5,8 @@ metadata:
   namespace: metallb-system
 spec:
   addresses:
+    - 5.196.149.159/32
+    - 5.196.149.200/32
     - 5.196.149.203/32
 ---
 apiVersion: metallb.io/v1beta1

scripts/00_install_metalLB.sh

@@ -1,11 +1,11 @@
 #!/bin/bash
 
-set -e
+set -ex
 
 helm repo add metallb https://metallb.github.io/metallb
 helm repo update
 
-kubectl create namespace metallb-system || true
+kubectl create namespace metallb-system
 kubectl label namespace metallb-system pod-security.kubernetes.io/enforce=privileged
 
-helm install metallb metallb/metallb --namespace metallb-system -f ./helm-values/metallb.yaml
+helm install metallb metallb/metallb --namespace metallb-system

scripts/01_install_traefik.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-set -e
+set -ex
 
 # This script installs Traefik using Helm, with MetalLB load balancer configuration.
 # Ensure you pass the IP from the MetalLB pool as an argument when running the script.
@@ -20,11 +20,11 @@ helm repo add traefik https://traefik.github.io/charts
 helm repo update
 
 # Creating the Traefik namespace
-kubectl create namespace traefik || true
+kubectl create namespace traefik
 # Uncomment the line below to enable privileged pod security policy for the namespace
 kubectl label namespace traefik pod-security.kubernetes.io/enforce=privileged
 
 # Installing Traefik with the MetalLB IP specified
-helm install traefik traefik/traefik --namespace traefik -f helm-values/traefik.yaml \
+helm install traefik traefik/traefik --namespace traefik \
   --set service.type=LoadBalancer \
   --set service.loadBalancerIP=$METALLB_IP

scripts/03_install_cert_manager.sh

@@ -1,11 +1,11 @@
 #!/bin/bash
 
-set -e
+set -ex
 
 helm repo add jetstack https://charts.jetstack.io
 helm repo update
 
-kubectl create namespace cert-manager || true
+kubectl create namespace cert-manager
 
-helm install cert-manager jetstack/cert-manager --namespace cert-manager -f helm-values/cert-manager.yaml \
+helm install cert-manager jetstack/cert-manager --namespace cert-manager \
   --set installCRDs=true

scripts/04_install_external_dns.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-set -e
+set -ex
 
 # Check if the Cloudflare API token is provided as an argument
 if [ -z "$1" ]; then
@@ -17,10 +17,10 @@ helm repo add bitnami https://charts.bitnami.com/bitnami
 helm repo update
 
 # Create the namespace for external DNS
-kubectl create namespace external-dns || true
+kubectl create namespace external-dns
 
 # Install the external-dns chart with the provided Cloudflare API token
-helm install external-dns bitnami/external-dns --namespace external-dns -f helm-values/external-dns.yaml \
+helm install external-dns bitnami/external-dns --namespace external-dns \
   --set provider=cloudflare \
   --set cloudflare.apiToken="$CLOUDFLARE_API_TOKEN" \
   --set txtOwnerId=external-dns