# metallb ![Version: 0.0.0](https://img.shields.io/badge/Version-0.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.0.0](https://img.shields.io/badge/AppVersion-v0.0.0-informational?style=flat-square) A network load-balancer implementation for Kubernetes using standard routing protocols **Homepage:** ## Source Code * ## Requirements Kubernetes: `>= 1.19.0-0` | Repository | Name | Version | |------------|------|---------| | | crds | 0.0.0 | | https://metallb.github.io/frr-k8s | frr-k8s | 0.0.25 | ## Values | Key | Type | Default | Description | |-----|------|---------|-------------| | controller.affinity | object | `{}` | | | controller.enabled | bool | `true` | | | controller.extraContainers | list | `[]` | | | controller.image.pullPolicy | string | `nil` | | | controller.image.repository | string | `"quay.io/metallb/controller"` | | | controller.image.tag | string | `nil` | | | controller.labels | object | `{}` | | | controller.livenessProbe.enabled | bool | `true` | | | controller.livenessProbe.failureThreshold | int | `3` | | | controller.livenessProbe.initialDelaySeconds | int | `10` | | | controller.livenessProbe.periodSeconds | int | `10` | | | controller.livenessProbe.port | int | `17472` | | | controller.livenessProbe.successThreshold | int | `1` | | | controller.livenessProbe.timeoutSeconds | int | `1` | | | controller.logLevel | string | `"info"` | Controller log level. Must be one of: `all`, `debug`, `info`, `warn`, `error` or `none` | | controller.nodeSelector | object | `{}` | | | controller.podAnnotations | object | `{}` | | | controller.priorityClassName | string | `""` | | | controller.readinessProbe.enabled | bool | `true` | | | controller.readinessProbe.failureThreshold | int | `3` | | | controller.readinessProbe.initialDelaySeconds | int | `10` | | | controller.readinessProbe.periodSeconds | int | `10` | | | controller.readinessProbe.port | int | `17472` | | | controller.readinessProbe.successThreshold | int | `1` | | | controller.readinessProbe.timeoutSeconds | int | `1` | | | controller.resources | object | `{}` | | | controller.runtimeClassName | string | `""` | | | controller.securityContext.fsGroup | int | `65534` | | | controller.securityContext.runAsNonRoot | bool | `true` | | | controller.securityContext.runAsUser | int | `65534` | | | controller.serviceAccount.annotations | object | `{}` | | | controller.serviceAccount.create | bool | `true` | | | controller.serviceAccount.name | string | `""` | | | controller.strategy.type | string | `"RollingUpdate"` | | | controller.tolerations | list | `[]` | | | controller.webhookMode | string | `"enabled"` | | | crds.enabled | bool | `true` | | | crds.validationFailurePolicy | string | `"Fail"` | | | frr-k8s.prometheus.serviceMonitor.enabled | bool | `false` | Enable Prometheus ServiceMonitor for frr-k8s metrics. | | frrk8s.enabled | bool | `true` | If set, enables frrk8s as a backend. This is mutually exclusive to frr mode. | | frrk8s.external | bool | `false` | If true, uses an external frr-k8s installation instead of the bundled subchart. | | frrk8s.namespace | string | `""` | Namespace where external frr-k8s is installed (only used when external=true). | | fullnameOverride | string | `""` | | | imagePullSecrets | list | `[]` | | | loadBalancerClass | string | `""` | | | nameOverride | string | `""` | | | networkpolicies.apiPort | int | `6443` | | | networkpolicies.defaultDeny | bool | `false` | | | networkpolicies.enabled | bool | `false` | | | prometheus.metricsPort | int | `9120` | | | prometheus.namespace | string | `""` | | | prometheus.podMonitor.additionalLabels | object | `{}` | | | prometheus.podMonitor.annotations | object | `{}` | | | prometheus.podMonitor.enabled | bool | `false` | | | prometheus.podMonitor.interval | string | `nil` | | | prometheus.podMonitor.jobLabel | string | `"app.kubernetes.io/name"` | | | prometheus.podMonitor.metricRelabelings | list | `[]` | | | prometheus.podMonitor.relabelings | list | `[]` | | | prometheus.prometheusRule.additionalLabels | object | `{}` | | | prometheus.prometheusRule.addressPoolExhausted.enabled | bool | `true` | | | prometheus.prometheusRule.addressPoolExhausted.excludePools | string | `""` | | | prometheus.prometheusRule.addressPoolExhausted.labels.severity | string | `"critical"` | | | prometheus.prometheusRule.addressPoolUsage.enabled | bool | `true` | | | prometheus.prometheusRule.addressPoolUsage.excludePools | string | `""` | | | prometheus.prometheusRule.addressPoolUsage.thresholds[0].labels.severity | string | `"warning"` | | | prometheus.prometheusRule.addressPoolUsage.thresholds[0].percent | int | `75` | | | prometheus.prometheusRule.addressPoolUsage.thresholds[1].labels.severity | string | `"warning"` | | | prometheus.prometheusRule.addressPoolUsage.thresholds[1].percent | int | `85` | | | prometheus.prometheusRule.addressPoolUsage.thresholds[2].labels.severity | string | `"critical"` | | | prometheus.prometheusRule.addressPoolUsage.thresholds[2].percent | int | `95` | | | prometheus.prometheusRule.annotations | object | `{}` | | | prometheus.prometheusRule.bgpSessionDown.enabled | bool | `true` | | | prometheus.prometheusRule.bgpSessionDown.labels.severity | string | `"critical"` | | | prometheus.prometheusRule.configNotLoaded.enabled | bool | `true` | | | prometheus.prometheusRule.configNotLoaded.labels.severity | string | `"warning"` | | | prometheus.prometheusRule.enabled | bool | `false` | | | prometheus.prometheusRule.extraAlerts | list | `[]` | | | prometheus.prometheusRule.staleConfig.enabled | bool | `true` | | | prometheus.prometheusRule.staleConfig.labels.severity | string | `"warning"` | | | prometheus.rbacPrometheus | bool | `true` | | | prometheus.scrapeAnnotations | bool | `false` | | | prometheus.serviceAccount | string | `""` | | | prometheus.serviceMonitor.controller.additionalLabels | object | `{}` | | | prometheus.serviceMonitor.controller.annotations | object | `{}` | | | prometheus.serviceMonitor.controller.tlsConfig.insecureSkipVerify | bool | `true` | | | prometheus.serviceMonitor.enabled | bool | `false` | | | prometheus.serviceMonitor.interval | string | `nil` | | | prometheus.serviceMonitor.jobLabel | string | `"app.kubernetes.io/name"` | | | prometheus.serviceMonitor.metricRelabelings | list | `[]` | | | prometheus.serviceMonitor.relabelings | list | `[]` | | | prometheus.serviceMonitor.speaker.additionalLabels | object | `{}` | | | prometheus.serviceMonitor.speaker.annotations | object | `{}` | | | prometheus.serviceMonitor.speaker.tlsConfig.insecureSkipVerify | bool | `true` | | | rbac.create | bool | `true` | | | speaker.affinity | object | `{}` | | | speaker.bgpDebounceTimeout | string | `nil` | BGP debounce timeout for FRR configuration reloads, in milliseconds. Only applies when BGP type is frr. Default (when unset) is 3000 ms. This feature is experimental | | speaker.enabled | bool | `true` | | | speaker.excludeInterfaces.enabled | bool | `true` | | | speaker.extraContainers | list | `[]` | | | speaker.frr.enabled | bool | `false` | | | speaker.frr.image.pullPolicy | string | `nil` | | | speaker.frr.image.repository | string | `"quay.io/frrouting/frr"` | | | speaker.frr.image.tag | string | `"10.5.3"` | | | speaker.frr.metricsPort | int | `9121` | | | speaker.frr.resources | object | `{}` | | | speaker.frrMetrics.resources | object | `{}` | | | speaker.ignoreExcludeLB | bool | `false` | | | speaker.image.pullPolicy | string | `nil` | | | speaker.image.repository | string | `"quay.io/metallb/speaker"` | | | speaker.image.tag | string | `nil` | | | speaker.initContainers.cpFrrFiles.resources | object | `{}` | | | speaker.initContainers.cpMetrics.resources | object | `{}` | | | speaker.initContainers.cpReloader.resources | object | `{}` | | | speaker.labels | object | `{}` | | | speaker.livenessProbe.enabled | bool | `true` | | | speaker.livenessProbe.failureThreshold | int | `3` | | | speaker.livenessProbe.initialDelaySeconds | int | `10` | | | speaker.livenessProbe.periodSeconds | int | `10` | | | speaker.livenessProbe.port | int | `17472` | | | speaker.livenessProbe.successThreshold | int | `1` | | | speaker.livenessProbe.timeoutSeconds | int | `1` | | | speaker.logLevel | string | `"info"` | Speaker log level. Must be one of: `all`, `debug`, `info`, `warn`, `error` or `none` | | speaker.memberlist.enabled | bool | `true` | When enabled: false, the speaker pods must run on all nodes | | speaker.memberlist.mlBindAddrOverride | string | `""` | | | speaker.memberlist.mlBindPort | int | `7946` | | | speaker.memberlist.mlSecretKeyPath | string | `"/etc/ml_secret_key"` | | | speaker.nodeSelector | object | `{}` | | | speaker.podAnnotations | object | `{}` | | | speaker.priorityClassName | string | `""` | | | speaker.readinessProbe.enabled | bool | `true` | | | speaker.readinessProbe.failureThreshold | int | `3` | | | speaker.readinessProbe.initialDelaySeconds | int | `10` | | | speaker.readinessProbe.periodSeconds | int | `10` | | | speaker.readinessProbe.port | int | `17472` | | | speaker.readinessProbe.successThreshold | int | `1` | | | speaker.readinessProbe.timeoutSeconds | int | `1` | | | speaker.reloader.resources | object | `{}` | | | speaker.resources | object | `{}` | | | speaker.runtimeClassName | string | `""` | | | speaker.securityContext | object | `{}` | | | speaker.serviceAccount.annotations | object | `{}` | | | speaker.serviceAccount.create | bool | `true` | | | speaker.serviceAccount.name | string | `""` | | | speaker.startupProbe.enabled | bool | `true` | | | speaker.startupProbe.failureThreshold | int | `30` | | | speaker.startupProbe.periodSeconds | int | `5` | | | speaker.tolerateMaster | bool | `true` | | | speaker.tolerations | list | `[]` | | | speaker.updateStrategy.type | string | `"RollingUpdate"` | | | tls.cipherSuites | string | `""` | Comma-separated list of TLS cipher suites. If empty, uses Go defaults. Only applies to TLS 1.2. | | tls.controllerMetricsTLSSecret | string | `""` | The name of the secret to be mounted in the controller pod to provide TLS certificates for metrics endpoints. If not present, a self-signed certificate is auto-generated. | | tls.curvePreferences | string | `""` | Comma-separated list of numeric CurveID values (e.g. 29,4588). See https://pkg.go.dev/crypto/tls#CurveID. If empty, uses Go defaults. | | tls.minVersion | string | `""` | Minimum TLS version (VersionTLS12 or VersionTLS13). Defaults to VersionTLS13. | | tls.speakerMetricsTLSSecret | string | `""` | The name of the secret to be mounted in the speaker pod to provide TLS certificates for metrics endpoints. If not present, a self-signed certificate is auto-generated. | ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.10.0](https://github.com/norwoodj/helm-docs/releases/v1.10.0)