From cbf4161e3db424fefaf2ca6d3bccb373028e2fc9 Mon Sep 17 00:00:00 2001
From: Dreaded_X <tim@huizinga.dev>
Date: Wed, 25 Sep 2024 00:44:37 +0200
Subject: [PATCH] Ensure traefik only runs on master nodes

---
 clusters/titan.lan.huizinga.dev/traefik/traefik.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/clusters/titan.lan.huizinga.dev/traefik/traefik.yaml b/clusters/titan.lan.huizinga.dev/traefik/traefik.yaml
index 93b3628..675cec4 100644
--- a/clusters/titan.lan.huizinga.dev/traefik/traefik.yaml
+++ b/clusters/titan.lan.huizinga.dev/traefik/traefik.yaml
@@ -16,3 +16,13 @@ spec:
   values:
     deployment:
       kind: DaemonSet
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+            - matchExpressions:
+                - key: node-role.kubernetes.io/master
+                  operator: Exists
+            - matchExpressions:
+                - key: node-role.kubernetes.io/control-plane
+                  operator: Exists