apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: metallb
  namespace: metallb-system
spec:
  interval: 10m
  chart:
    spec:
      chart: metallb
      version: "0.16.1"
      sourceRef:
        kind: HelmRepository
        name: metallb
        namespace: metallb-system
  driftDetection:
    mode: enabled
  postRenderers:
    - kustomize:
        patches:
          # frr's liveness/startup probes default to timeoutSeconds: 1,
          # which is too tight when the node is under CPU pressure (an
          # HTTPS healthz call can't always complete in 1s) - kubelet then
          # kills+restarts the container, which itself adds more CPU load,
          # compounding the problem. Give the probes more slack instead.
          - target:
              kind: DaemonSet
              name: metallb-frr-k8s
            patch: |
              apiVersion: apps/v1
              kind: DaemonSet
              metadata:
                name: metallb-frr-k8s
              spec:
                template:
                  spec:
                    containers:
                      - name: frr
                        livenessProbe:
                          timeoutSeconds: 5
                          failureThreshold: 6
                        startupProbe:
                          timeoutSeconds: 5