feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

checkmk/k8s/checkmk.yaml

@@ -31,11 +31,8 @@ spec:
         envFrom:
         - secretRef:
             name: checkmk-secrets
-        env:
-        - name: CMK_SITE_ID
-          value: "cmk"
-        - name: TZ
-          value: "Etc/UTC"
+        - configMapRef: 
+            name: checkmk-config
         ports:
         - containerPort: 5000
         volumeMounts:

checkmk/k8s/config.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: checkmk-config
+  namespace: checkmk
+data:
+  TZ: Europe/Bratislava
+  CMK_SITE_ID: cmk

checkmk/k8s/ingress.yaml

@@ -13,7 +13,7 @@ spec:
     - name: checkmk-service
       port: 5000
   tls:
-    {}
+    certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute