---
# Role: traefik
# Déploie le reverse proxy Traefik

- name: Créer le namespace traefik
  kubernetes.core.k8s:
    state: present
    definition:
      apiVersion: v1
      kind: Namespace
      metadata:
        name: "{{ traefik_namespace }}"

- name: Installer Traefik
  kubernetes.core.helm:
    name: traefik
    chart_ref: helm_charts.traefik.chart
    release_namespace: "{{ traefik_namespace }}"
    values:
      globalArguments:
        - "--global.checknewversion=false"
        - "--global.sendanonymoususage=false"
      additionalArguments:
        - "--providers.kubernetescrd.allowexternalnameservices=true"
        - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
        - "--certificatesresolvers.letsencrypt.acme.email={{ acme_email }}"
        - "--certificatesresolvers.letsencrypt.acme.storage=/data/acme.json"
      ports:
        traefik:
          port: 9000
          expose: false
        web:
          port: 80
          expose: true
        websecure:
          port: 443
          expose: true
      persistence:
        enabled: true
        size: 1Gi
      service:
        type: LoadBalancer
      resources:
        requests:
          cpu: "100m"
          memory: "128Mi"
        limits:
          cpu: "1000m"
          memory: "512Mi"