From 18d1e21690d7832730b6d1d10660117baaa09ae4 Mon Sep 17 00:00:00 2001 From: mr-forust Date: Wed, 10 Jun 2026 21:14:10 +0200 Subject: [PATCH] fix(k8s): traefik log spam for non-existing local-tls secret, because of namespace isolation --- adguardhome/k8s/ingress.yaml | 4 ---- checkmk/k8s/ingress.yaml | 4 ---- convertx/k8s/ingress.yaml | 4 ---- dockmon/k8s/ingress.yaml | 4 ---- downtify/k8s/ingress.yaml | 4 ---- gitea/k8s/ingressroute.yaml | 6 ++---- headscale/k8s/ingress.yaml | 17 +++++------------ homepages/k8s/ingress.yaml | 11 +++-------- kener/k8s/ingress.yaml | 5 +---- metube/k8s/ingress.yaml | 7 ++----- netronome/k8s/ingress.yaml | 5 +---- nextcloud/k8s/ingress.yaml | 11 +++-------- portainer/k8s/ingress.yaml | 5 +---- traefik/k8s/ingress.yaml | 5 +---- uptime-kuma/k8s/ingress.yaml | 5 +---- 15 files changed, 20 insertions(+), 77 deletions(-) diff --git a/adguardhome/k8s/ingress.yaml b/adguardhome/k8s/ingress.yaml index 0d17aa2..02a5bda 100644 --- a/adguardhome/k8s/ingress.yaml +++ b/adguardhome/k8s/ingress.yaml @@ -29,8 +29,6 @@ spec: services: - name: adguard-service port: 3000 - tls: - secretName: local-tls --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,8 +44,6 @@ spec: services: - name: adguard-service port: 3000 - tls: - secretName: local-tls --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute diff --git a/checkmk/k8s/ingress.yaml b/checkmk/k8s/ingress.yaml index 363e7be..a3d885e 100644 --- a/checkmk/k8s/ingress.yaml +++ b/checkmk/k8s/ingress.yaml @@ -29,8 +29,6 @@ spec: services: - name: checkmk-service port: 5000 - tls: - secretName: local-tls --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,5 +44,3 @@ spec: services: - name: checkmk-service port: 5000 - tls: - secretName: local-tls diff --git a/convertx/k8s/ingress.yaml b/convertx/k8s/ingress.yaml index e7a0759..ac966d2 100644 --- a/convertx/k8s/ingress.yaml +++ b/convertx/k8s/ingress.yaml @@ -29,8 +29,6 @@ spec: services: - name: convertx-service port: 3000 - tls: - secretName: local-tls --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,5 +44,3 @@ spec: services: - name: convertx-service port: 3000 - tls: - secretName: local-tls diff --git a/dockmon/k8s/ingress.yaml b/dockmon/k8s/ingress.yaml index bc03059..791bf3b 100644 --- a/dockmon/k8s/ingress.yaml +++ b/dockmon/k8s/ingress.yaml @@ -41,8 +41,6 @@ spec: - name: dockmon-service port: 443 serversTransport: dockmon-transport - tls: - secretName: local-tls --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -59,5 +57,3 @@ spec: - name: dockmon-service port: 443 serversTransport: dockmon-transport - tls: - secretName: local-tls diff --git a/downtify/k8s/ingress.yaml b/downtify/k8s/ingress.yaml index 610b4b5..b6fc1a1 100644 --- a/downtify/k8s/ingress.yaml +++ b/downtify/k8s/ingress.yaml @@ -31,8 +31,6 @@ spec: services: - name: downtify-service port: 8000 - tls: - secretName: local-tls --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -48,5 +46,3 @@ spec: services: - name: downtify-service port: 8000 - tls: - secretName: local-tls diff --git a/gitea/k8s/ingressroute.yaml b/gitea/k8s/ingressroute.yaml index 9b71804..d2402c9 100644 --- a/gitea/k8s/ingressroute.yaml +++ b/gitea/k8s/ingressroute.yaml @@ -29,8 +29,7 @@ spec: services: - name: gitea-service port: 3000 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,8 +45,7 @@ spec: services: - name: gitea-service port: 3000 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute diff --git a/headscale/k8s/ingress.yaml b/headscale/k8s/ingress.yaml index beb6a11..8d56818 100644 --- a/headscale/k8s/ingress.yaml +++ b/headscale/k8s/ingress.yaml @@ -29,8 +29,7 @@ spec: services: - name: headscale-server-external port: 8080 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,8 +45,7 @@ spec: services: - name: headscale-server-external port: 8080 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -82,8 +80,7 @@ spec: services: - name: headscale-ui-external port: 80 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -99,8 +96,7 @@ spec: services: - name: headscale-ui-external port: 80 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -133,8 +129,7 @@ spec: services: - name: headscale-server-external port: 9090 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -150,5 +145,3 @@ spec: services: - name: headscale-server-external port: 9090 - tls: - secretName: local-tls diff --git a/homepages/k8s/ingress.yaml b/homepages/k8s/ingress.yaml index 277b0be..0b7b73e 100644 --- a/homepages/k8s/ingress.yaml +++ b/homepages/k8s/ingress.yaml @@ -29,8 +29,7 @@ spec: services: - name: forust-homepage-service port: 80 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,8 +45,7 @@ spec: services: - name: forust-homepage-service port: 80 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -80,8 +78,7 @@ spec: services: - name: xdfnx-homepage-service port: 80 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -97,5 +94,3 @@ spec: services: - name: xdfnx-homepage-service port: 80 - tls: - secretName: local-tls diff --git a/kener/k8s/ingress.yaml b/kener/k8s/ingress.yaml index 7b205f8..cb63733 100644 --- a/kener/k8s/ingress.yaml +++ b/kener/k8s/ingress.yaml @@ -29,8 +29,7 @@ spec: services: - name: kener-service port: 3000 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,5 +45,3 @@ spec: services: - name: kener-service port: 3000 - tls: - secretName: local-tls diff --git a/metube/k8s/ingress.yaml b/metube/k8s/ingress.yaml index 06733a4..ada258a 100644 --- a/metube/k8s/ingress.yaml +++ b/metube/k8s/ingress.yaml @@ -10,7 +10,7 @@ spec: - match: Host(`metube.forust.xyz`) kind: Rule middlewares: - - name: security-chain@file + - name: security-headers@file services: - name: metube-service port: 8081 @@ -31,8 +31,7 @@ spec: services: - name: metube-service port: 8081 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -48,5 +47,3 @@ spec: services: - name: metube-service port: 8081 - tls: - secretName: local-tls diff --git a/netronome/k8s/ingress.yaml b/netronome/k8s/ingress.yaml index f956603..8925939 100644 --- a/netronome/k8s/ingress.yaml +++ b/netronome/k8s/ingress.yaml @@ -29,8 +29,7 @@ spec: services: - name: netronome-service port: 7575 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,5 +45,3 @@ spec: services: - name: netronome-service port: 7575 - tls: - secretName: local-tls diff --git a/nextcloud/k8s/ingress.yaml b/nextcloud/k8s/ingress.yaml index 4090c57..d88def5 100644 --- a/nextcloud/k8s/ingress.yaml +++ b/nextcloud/k8s/ingress.yaml @@ -34,8 +34,7 @@ spec: services: - name: nextcloud-apache port: 11000 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -53,8 +52,7 @@ spec: services: - name: nextcloud-apache port: 11000 - tls: - secretName: local-tls + --- # Nextcloud AIO apiVersion: traefik.io/v1alpha1 @@ -92,8 +90,7 @@ spec: port: 8888 scheme: https serversTransport: insecure-transport - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -111,5 +108,3 @@ spec: port: 8888 scheme: https serversTransport: insecure-transport - tls: - secretName: local-tls diff --git a/portainer/k8s/ingress.yaml b/portainer/k8s/ingress.yaml index 127c49a..a094ad4 100644 --- a/portainer/k8s/ingress.yaml +++ b/portainer/k8s/ingress.yaml @@ -29,8 +29,7 @@ spec: services: - name: portainer-service port: 9000 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,5 +45,3 @@ spec: services: - name: portainer-service port: 9000 - tls: - secretName: local-tls diff --git a/traefik/k8s/ingress.yaml b/traefik/k8s/ingress.yaml index ade4f4d..d6b7804 100644 --- a/traefik/k8s/ingress.yaml +++ b/traefik/k8s/ingress.yaml @@ -30,8 +30,7 @@ spec: services: - name: api@internal kind: TraefikService - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -47,5 +46,3 @@ spec: services: - name: api@internal kind: TraefikService - tls: - secretName: local-tls diff --git a/uptime-kuma/k8s/ingress.yaml b/uptime-kuma/k8s/ingress.yaml index a51e6af..e9079fd 100644 --- a/uptime-kuma/k8s/ingress.yaml +++ b/uptime-kuma/k8s/ingress.yaml @@ -29,8 +29,7 @@ spec: services: - name: uptime-kuma-service port: 3001 - tls: - secretName: local-tls + --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -46,5 +45,3 @@ spec: services: - name: uptime-kuma-service port: 3001 - tls: - secretName: local-tls