# infrastructure/metallb/ingress-pool.yaml
apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: ingress-pool
  namespace: metallb-system
spec:
  addresses:
    - 192.168.22.9/32
  autoAssign: false
---
apiVersion: metallb.io/v1beta1
kind: L2Advertisement
metadata:
  name: ingress-adv
  namespace: metallb-system
spec:
  ipAddressPools:
    - ingress-pool
  # Keep the shared public VIP off undervolting and I/O-saturated workers.
  nodeSelectors:
    - matchLabels:
        node-role.kubernetes.io/control-plane: "true"