test safe traefik routing to exterrnal dashboard

infrastructure/03-traefik/overlay-external/kustomization.yaml

@@ -9,6 +9,7 @@ components:
   - ../../../components/front-region-selector.yaml
 
 resources:
+  - traefik-ingress-dashboard-local.yaml
   - ../base
 
 

infrastructure/03-traefik/overlay-external/patches/traefik-deployment-patch.yaml

@@ -16,7 +16,8 @@ spec:
             - --global.checknewversion=false
             - --entrypoints.dns.address=:53/udp
             - --entrypoints.metrics.address=:9100/tcp
-            - --entrypoints.traefik.address=:9000/tcp
+            - --entrypoints.traefik-dash.address=:9000/tcp
+            - --entrypoints.traefik.address=:9080/tcp
             - --entrypoints.web.address=:8000/tcp
             - --entrypoints.web.http.redirections.entryPoint.to=websecure
             - --entrypoints.web.http.redirections.entryPoint.scheme=https

infrastructure/03-traefik/overlay-external/patches/traefik-service-patch.yaml

@@ -7,9 +7,13 @@ spec:
   type: NodePort
 
   ports:
-  - name: traefik
+  - name: traefik-dash
     port: 9000
     protocol: TCP
+    targetPort: traefik-dash
+  - name: traefik
+    port: 9090
+    protocol: TCP
     targetPort: traefik
   - name: web
     port: 80

infrastructure/03-traefik/overlay-external/traefik-ingress-dashboard-front.yaml

@@ -0,0 +1,16 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  labels:
+    local: "true"
+  name: traefik-dashboard-front-internal
+  namespace: traefik
+spec:
+  entryPoints:
+  - traefik
+  routes:
+  - kind: Rule
+    match: Host(`tr-front.steffenillium.de`)
+    services:
+    - kind: TraefikService
+      name: api@internal

infrastructure/03-traefik/overlay-internal/traefik-ingress-dashboard-local.yaml

@@ -32,4 +32,4 @@ spec:
     match: Host(`tr-front.steffenillium.de`)
     services:
     - name: front-traefik
-      port: 9000
+      port: 9080