feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

2026-06-08 12:27:55 +02:00
parent 36922a177c
commit e19660fdf4
21 changed files with 145 additions and 121 deletions
@@ -1,36 +1,3 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: dashboard-dev
-  namespace: traefik
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`traefik.gigaforust.internal`)
-    kind: Rule
-    services:
-    - name: api@internal
-      kind: TraefikService
-  tls:
-    secretName: local-tls
---
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: dashboard-local
-  namespace: traefik
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`traefik.workstation.internal`)
-    kind: Rule
-    services:
-    - name: api@internal
-      kind: TraefikService
-  tls:
-    secretName: local-tls
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -41,10 +8,44 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`traefik.forust.xyz`)
-    kind: Rule
-    services:
-    - name: api@internal
-      kind: TraefikService
+    - match: Host(`traefik.forust.xyz`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
  tls:
-    {}
+    certResolver: letsencrypt
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dashboard-local
+  namespace: traefik
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`traefik.workstation.internal`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dashboard-dev
+  namespace: traefik
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`traefik.gigaforust.internal`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
+  tls:
+    secretName: local-tls