(fleet/metallb) bump metallb to 0.14.4; set metallb limits; add ingress-nginx-lhn to ruka

fleet/lib/metallb-conf/overlays/ruka/ipaddresspool-ingress-lhn.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: metallb.io/v1beta1
+kind: IPAddressPool
+metadata:
+  name: ingress-lhn
+  namespace: metallb-system
+spec:
+  addresses:
+    - 139.229.153.1/32
+  autoAssign: false
+---
+apiVersion: metallb.io/v1beta1
+kind: L2Advertisement
+metadata:
+  name: ingress-lhn
+  namespace: metallb-system
+spec:
+  ipAddressPools:
+    - ingress-lhn
+  interfaces:
+    - br2505

fleet/lib/metallb-conf/overlays/ruka/ipaddresspool-lhn.yaml

@@ -6,7 +6,7 @@ metadata:
   namespace: metallb-system
 spec:
   addresses:
-    - 139.229.153.1-139.229.153.62  # ~139.229.153.0/26
+    - 139.229.153.2-139.229.153.62  # ~139.229.153.0/26
   autoAssign: false
 ---
 apiVersion: metallb.io/v1beta1

fleet/lib/metallb/fleet.yaml

@@ -8,16 +8,32 @@ helm:
   chart: *name
   releaseName: *name
   repo: https://metallb.github.io/metallb
-  version: 0.14.3
+  version: 0.14.4
   # daemonset rollout may take > 300s on larger clusters
   timeoutSeconds: 900
   waitForJobs: true
   atomic: false
   values:
     controller:
       priorityClassName: system-cluster-critical
+      resources:
+        limits:
+          cpu: 100m
+          memory: 192Mi
+        requests:
+          cpu: 10m
+          memory: 192Mi
     speaker:
       priorityClassName: system-node-critical
+      frr:
+        enabled: false
+      resources:  # XXX check live usage on yagan after frr is disabled
+        limits:
+          cpu: 500m
+          memory: 192Mi
+        requests:
+          cpu: 50m
+          memory: 192Mi
     prometheus:
       namespace: "kube-prometheus-stack"
       serviceAccount: "kube-prometheus-stack-prometheus"

fleet/s/dev/c/ruka/ingress-nginx-lhn

@@ -0,0 +1 @@
+../../../../lib/ingress-nginx-lhn