feat(k3s): 集群整体升级

apps/infra/net/nginx/helmchart.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   repo: https://kubernetes.github.io/ingress-nginx
   chart: ingress-nginx
-  version: 4.11.3
+  version: 4.12.0
   targetNamespace: infra-net
   valuesContent: |-
     fullnameOverride: ingress-nginx
@@ -30,6 +30,7 @@ spec:
       config:
         use-forwarded-headers: "true"
         allow-snippet-annotations: "true"
+        annotations-risk-level: Critical
         # http to https重定向
         ssl-redirect: "true"
         # 自定义错误页面
@@ -105,7 +106,7 @@ spec:
         plugins: "crowdsec"
         lua-shared-dicts: "crowdsec_cache: 50m"
       # 启用geoip2模块
-      maxmindLicenseKey: "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"
+      maxmindLicenseKey: "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"
       extraArgs:
         default-ssl-certificate: "infra-net/dev-cm-crt"
       # crowdsec插件配置
@@ -158,6 +159,18 @@ spec:
         registry: docker.io
         image: devcm/default-backend
         tag: v0.1.0
-      # 和controller部署同一节点
-      nodeSelector:
-        svccontroller.k3s.cattle.io/enablelb: "true"
+      autoscaling:
+        enabled: true
+        minReplicas: 1
+        maxReplicas: 3
+        targetCPUUtilizationPercentage: 80
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: topology.kubernetes.io/region
+                    operator: In
+                    values:
+                      - "cn-sh"
+                      - "cn-hk"