root

apps/templates/traefik.yaml

@@ -33,6 +33,18 @@ spec:
           nodeSelector:
             hasDns: "true"
 
+          securityContext:
+            runAsNonRoot: false
+
+          affinity:
+            podAntiAffinity:
+              requiredDuringSchedulingIgnoredDuringExecution:
+                - labelSelector:
+                    matchLabels:
+                      app.kubernetes.io/name: traefik
+                      app.kubernetes.io/instance: traefik
+                  topologyKey: kubernetes.io/hostname
+
           globalArguments: []
 
           additionalArguments: