platform: align GX10 Traefik source policy with live chart

gx10/platform/traefik-helmchart.yaml

@@ -10,74 +10,28 @@ spec:
   targetNamespace: traefik-system
   createNamespace: true
   valuesContent: |
-    deployment:
-      replicas: 1
-    additionalArguments:
-      - "--api.dashboard=true"
-      - "--log.level=INFO"
-      - "--providers.kubernetescrd"
-      - "--providers.kubernetesingress"
-      - "--providers.kubernetescrd.allowEmptyServices=true"
-      - "--providers.kubernetesingress.allowEmptyServices=true"
-      - "--providers.kubernetesingress.ingressendpoint.publishedservice=traefik-system/traefik"
-    ingressRoute:
-      dashboard:
-        enabled: false
-    rbac:
-      enabled: true
     service:
       type: LoadBalancer
       spec:
         externalTrafficPolicy: Local
       annotations:
-        metallb.io/loadBalancerIPs: "10.0.57.202"
+        metallb.universe.tf/address-pool: prod-pool
-        metallb.io/address-pool: "prod-pool"
+        metallb.universe.tf/loadBalancerIPs: 10.0.57.202
-    ports:
+    ingressClass:
-      web:
+      enabled: true
-        port: 8000
+      isDefaultClass: false
-        exposedPort: 80
+    providers:
-        protocol: TCP
+      kubernetesCRD:
-      websecure:
+        enabled: true
-        port: 8443
+        allowEmptyServices: true
-        exposedPort: 443
+      kubernetesIngress:
-        protocol: TCP
+        enabled: true
-        tls:
+        allowEmptyServices: true
+        publishedService:
           enabled: true
-      irc:
+    ingressRoute:
-        port: 6667
+      dashboard:
-        exposedPort: 6667
+        enabled: false
-        protocol: TCP
+    logs:
-        expose:
+      general:
-          default: true
+        level: INFO
-      irctls:
-        port: 6697
-        exposedPort: 6697
-        protocol: TCP
-        expose:
-          default: true
-      traefik:
-        port: 8080
-        exposedPort: 8080
-        protocol: TCP
-        expose:
-          default: false
-      metrics:
-        port: 9100
-        exposedPort: 9100
-        protocol: TCP
-        expose:
-          default: false
-    metrics:
-      prometheus:
-        entryPoint: metrics
-    resources:
-      requests:
-        cpu: "100m"
-        memory: "128Mi"
-      limits:
-        cpu: "500m"
-        memory: "256Mi"
-    tolerations:
-      - key: "node-role.kubernetes.io/control-plane"
-        operator: "Exists"
-        effect: "NoSchedule"

tests/bluejay-infra-lint/FleetManifestLintTests.cs

@@ -255,7 +255,7 @@ public sealed class FleetManifestLintTests
         var path = Path.Combine(Inventory.BluejayRoot, "gx10", "platform", "traefik-helmchart.yaml");
         var manifest = File.ReadAllText(path);
 
-        manifest.Should().Contain("metallb.io/loadBalancerIPs: \"10.0.57.202\"");
+        manifest.Should().Contain("metallb.universe.tf/loadBalancerIPs: 10.0.57.202");
         manifest.Should().Contain("spec:\n        externalTrafficPolicy: Local");
     }