traefik test

infrastructure/03-traefik/base/traefik-RBAC.yaml

@@ -0,0 +1,65 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: traefik-ingress-controller
+
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - services
+      - endpoints
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses
+      - ingressclasses
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses/status
+    verbs:
+      - update
+  - apiGroups:
+      - traefik.io
+      - traefik.containo.us
+    resources:
+      - middlewares
+      - middlewaretcps
+      - ingressroutes
+      - traefikservices
+      - ingressroutetcps
+      - ingressrouteudps
+      - tlsoptions
+      - tlsstores
+      - serverstransports
+    verbs:
+      - get
+      - list
+      - watch
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: traefik-ingress-controller
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: traefik-ingress-controller
+subjects:
+  - kind: ServiceAccount
+    name: traefik-ingress-controller
+    namespace: default

infrastructure/03-traefik/base/traefik-clusterrole.yaml

@@ -0,0 +1,33 @@
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: traefik-ingress-controller
+
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - services
+      - endpoints
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses
+      - ingressclasses
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - extensions
+      - networking.k8s.io
+    resources:
+      - ingresses/status
+    verbs:
+      - update

infrastructure/03-traefik/base/traefik-dashboard-ingress.yaml

@@ -0,0 +1,14 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dashboard
+spec:
+  entryPoints:
+    - web
+    - websecure
+  routes:
+    - match: Host(`tr.steffenillium.de`) && (PathPrefix(`/dashboard`) || Host(`tr.steffenillium.de`) && PathPrefix(`/api`))
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService

infrastructure/03-traefik/base/traefik-helm-chart.yaml

@@ -0,0 +1,9 @@
+apiVersion: builtin
+kind: HelmChartInflationGenerator
+metadata:
+  name: traefik-ingress-controller
+name: traefik-ingress-controller
+namespace: traefik
+releaseName: latest
+repo: https://traefik.github.io/charts
+valuesFile: values.yaml

infrastructure/03-traefik/base/traefik-service-account.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: traefik-ingress-controller

infrastructure/03-traefik/base/values.yaml

@@ -0,0 +1,22 @@
+deployment:
+  kind: Deployment
+  replicas: 1
+
+rbac:
+  namespaced: false
+
+autoscaling:
+  enabled: false
+
+ingressRoute:
+  dashboard:
+    enabled: true
+    # Custom match rule with host domain
+    matchRule: Host(`tr.steffenillium.de`)
+    entryPoints: ["websecure", "web"]
+    # Add custom middlewares : authentication and redirection
+    # middlewares:
+    #   - name: traefik-dashboard-auth
+additionalArguments:
+- "--api.insecure=true"
+

infrastructure/03-traefik/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+# - base/traefik-RBAC.yaml
+# - base/traefik-clusterrole.yaml
+# - base/traefik-crds.yaml
+# - base/traefik-dashboard-ingress.yaml
+- base/traefik-helm-chart.yaml
+# - base/traefik-service-account.yaml
+- base/argo-cd-ui-ingress.yaml