From d35f6b490a7ca691597b71f1aebabe636e57fe16 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Tue, 20 Jan 2026 16:34:51 +0100 Subject: [PATCH] removed metallb public pool, added maxmind license --- ...ddressPool_public-pool_metallb-system.yaml | 30 ------------------- .../secret_nginx-system_maxmind-license.yaml | 23 ++++++++++++++ 2 files changed, 23 insertions(+), 30 deletions(-) delete mode 100644 infra/IPAddressPool_public-pool_metallb-system.yaml create mode 100644 infra/secret_nginx-system_maxmind-license.yaml diff --git a/infra/IPAddressPool_public-pool_metallb-system.yaml b/infra/IPAddressPool_public-pool_metallb-system.yaml deleted file mode 100644 index b29d16c..0000000 --- a/infra/IPAddressPool_public-pool_metallb-system.yaml +++ /dev/null @@ -1,30 +0,0 @@ -# MetalLB IP Address Pool for Public Services -# This creates a dedicated pool for the public-facing ingress controller -# -# IMPORTANT: Adjust the IP address based on your network! -# This assumes your existing pool is 192.168.0.200-192.168.0.220 -# We're using 192.168.0.221 as a dedicated public IP -# -# Apply with: kubectl apply -f metallb-public-pool.yaml ---- -apiVersion: metallb.io/v1beta1 -kind: IPAddressPool -metadata: - name: public-pool - namespace: metallb-system -spec: - addresses: - # Single IP dedicated to public ingress - # Adjust this to an available IP in your network! - - 192.168.0.190/32 - # Prevent auto-assignment - only explicit requests get this IP - autoAssign: false ---- -apiVersion: metallb.io/v1beta1 -kind: L2Advertisement -metadata: - name: public-l2-advertisement - namespace: metallb-system -spec: - ipAddressPools: - - public-pool \ No newline at end of file diff --git a/infra/secret_nginx-system_maxmind-license.yaml b/infra/secret_nginx-system_maxmind-license.yaml new file mode 100644 index 0000000..1733d79 --- /dev/null +++ b/infra/secret_nginx-system_maxmind-license.yaml @@ -0,0 +1,23 @@ +# MaxMind License Key Secret +# ============================================================================= +# Store your MaxMind license key securely +# +# To get a license key: +# 1. Register at https://www.maxmind.com/en/geolite2/signup +# 2. Log in and go to "Manage License Keys" +# 3. Generate a new license key +# 4. Replace YOUR_LICENSE_KEY_HERE with the actual key +# +# Apply with: kubectl apply -f Secret_maxmind-license_nginx-system.yaml +# +# For production, consider using sealed-secrets or external-secrets instead +# ============================================================================= +--- +apiVersion: v1 +kind: Secret +metadata: + name: maxmind-license + namespace: nginx-system +type: Opaque +stringData: + license-key: "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" \ No newline at end of file