From d58eb635d2f484fcfb3aea62646f245c3cfcd426 Mon Sep 17 00:00:00 2001
From: LordMathis <matus@namesny.com>
Date: Sun, 23 Mar 2025 12:51:54 +0100
Subject: [PATCH] Add MetalLB configuration and resources for Kubernetes

---
 infrastructure/controllers/kustomization.yaml |  1 +
 .../controllers/metallb/config-job.yaml       | 77 +++++++++++++++++++
 .../controllers/metallb/kustomization.yaml    |  8 ++
 .../controllers/metallb/namespace.yaml        |  5 ++
 .../controllers/metallb/release.yaml          | 20 +++++
 .../controllers/metallb/repository.yaml       |  9 +++
 6 files changed, 120 insertions(+)
 create mode 100644 infrastructure/controllers/metallb/config-job.yaml
 create mode 100644 infrastructure/controllers/metallb/kustomization.yaml
 create mode 100644 infrastructure/controllers/metallb/namespace.yaml
 create mode 100644 infrastructure/controllers/metallb/release.yaml
 create mode 100644 infrastructure/controllers/metallb/repository.yaml

diff --git a/infrastructure/controllers/kustomization.yaml b/infrastructure/controllers/kustomization.yaml
index 887298d..14bc91d 100644
--- a/infrastructure/controllers/kustomization.yaml
+++ b/infrastructure/controllers/kustomization.yaml
@@ -2,5 +2,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - metallb
   - cert-manager
   - traefik
diff --git a/infrastructure/controllers/metallb/config-job.yaml b/infrastructure/controllers/metallb/config-job.yaml
new file mode 100644
index 0000000..a688714
--- /dev/null
+++ b/infrastructure/controllers/metallb/config-job.yaml
@@ -0,0 +1,77 @@
+# /infrastructure/controllers/metallb/config-job.yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: metallb-config
+  namespace: metallb-system
+spec:
+  template:
+    spec:
+      serviceAccountName: metallb-config-sa
+      containers:
+      - name: kubectl
+        image: bitnami/kubectl:latest
+        command:
+        - /bin/bash
+        - -c
+        - |
+          # Get the external IP of the node using kubectl
+          SERVER_IP=$(kubectl get nodes -o jsonpath='{.items[0].status.addresses[?(@.type=="ExternalIP")].address}')
+          
+          echo "Detected server IP: $SERVER_IP"
+          
+          cat <<EOF | kubectl apply -f -
+          apiVersion: metallb.io/v1beta1
+          kind: IPAddressPool
+          metadata:
+            name: first-pool
+            namespace: metallb-system
+          spec:
+            addresses:
+            - ${SERVER_IP}/32
+          EOF
+          
+          cat <<EOF | kubectl apply -f -
+          apiVersion: metallb.io/v1beta1
+          kind: L2Advertisement
+          metadata:
+            name: l2-advert
+            namespace: metallb-system
+          spec:
+            ipAddressPools:
+            - first-pool
+          EOF
+          
+          echo "MetalLB configured to use IP: $SERVER_IP"
+      restartPolicy: OnFailure
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: metallb-config-sa
+  namespace: metallb-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: metallb-config-role
+rules:
+- apiGroups: ["metallb.io"]
+  resources: ["ipaddresspools", "l2advertisements"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: [""]
+  resources: ["nodes"]
+  verbs: ["get", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: metallb-config-rolebinding
+subjects:
+- kind: ServiceAccount
+  name: metallb-config-sa
+  namespace: metallb-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: metallb-config-role
\ No newline at end of file
diff --git a/infrastructure/controllers/metallb/kustomization.yaml b/infrastructure/controllers/metallb/kustomization.yaml
new file mode 100644
index 0000000..48497d2
--- /dev/null
+++ b/infrastructure/controllers/metallb/kustomization.yaml
@@ -0,0 +1,8 @@
+# /infrastructure/controllers/metallb/kustomization.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
+  - config-job.yaml
\ No newline at end of file
diff --git a/infrastructure/controllers/metallb/namespace.yaml b/infrastructure/controllers/metallb/namespace.yaml
new file mode 100644
index 0000000..f114741
--- /dev/null
+++ b/infrastructure/controllers/metallb/namespace.yaml
@@ -0,0 +1,5 @@
+# /infrastructure/controllers/metallb/namespace.yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: metallb-system
\ No newline at end of file
diff --git a/infrastructure/controllers/metallb/release.yaml b/infrastructure/controllers/metallb/release.yaml
new file mode 100644
index 0000000..15ff0ba
--- /dev/null
+++ b/infrastructure/controllers/metallb/release.yaml
@@ -0,0 +1,20 @@
+# /infrastructure/controllers/metallb/release.yaml
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: metallb
+  namespace: metallb-system
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: metallb
+      version: "0.14.9"
+      sourceRef:
+        kind: HelmRepository
+        name: metallb
+        namespace: metallb-system
+      interval: 15m
+  values:
+    crds:
+      enabled: true
\ No newline at end of file
diff --git a/infrastructure/controllers/metallb/repository.yaml b/infrastructure/controllers/metallb/repository.yaml
new file mode 100644
index 0000000..9483959
--- /dev/null
+++ b/infrastructure/controllers/metallb/repository.yaml
@@ -0,0 +1,9 @@
+# /infrastructure/controllers/metallb/repository.yaml
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: metallb
+  namespace: metallb-system
+spec:
+  interval: 24h
+  url: https://metallb.github.io/metallb
\ No newline at end of file