feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

adguardhome/k8s/ingress.yaml

@@ -1,19 +1,19 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: adguard-dev
+  name: adguard-prod
   namespace: adguard
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)
-    kind: Rule
-    services:
-    - name: adguard-service
-      port: 3000
+    - match: Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)
+      kind: Rule
+      services:
+        - name: adguard-service
+          port: 3000
   tls:
-    secretName: local-tls
+    certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -24,30 +24,30 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`)
-    kind: Rule
-    services:
-    - name: adguard-service
-      port: 3000
+    - match: Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`)
+      kind: Rule
+      services:
+        - name: adguard-service
+          port: 3000
   tls:
     secretName: local-tls
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: adguard-prod
+  name: adguard-dev
   namespace: adguard
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)
-    kind: Rule
-    services:
-    - name: adguard-service
-      port: 3000
+    - match: Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)
+      kind: Rule
+      services:
+        - name: adguard-service
+          port: 3000
   tls:
-    {}
+    secretName: local-tls
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -58,10 +58,9 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`dns.forust.xyz`) && PathPrefix(`/dns-query`)
-    kind: Rule
-    services:
-    - name: adguard-service
-      port: 3000
-  tls:
-    {}
+    - match: Host(`dns.forust.xyz`) && PathPrefix(`/dns-query`)
+      kind: Rule
+      services:
+        - name: adguard-service
+          port: 3000
+  tls: {}

adguardhome/k8s/secrets.yaml.example

@@ -1,7 +1,7 @@
 kubectl apply -f k8s/namespace.yaml && \
 kubectl create secret tls adguard-certs -n adguard \
   --cert=certs/fullchain.pem \
-  --key=certs/privkey.pem --dry-run=client -o json > \
+  --key=certs/privkey.pem --dry-run=client -o yaml > \
   k8s/secrets.yaml
 
 #  OR WITH NO FILE CREATION: