nilsandClaude Opus 5.5
315586f94c
The server's host is car.k8s.stinnesbeck.com, not car.stinnesbeck.com: IngressRoute, PUBLIC_URL (so the pairing QR code points there), the app's pre-filled server URL and hint, and the docs. Grafana's placeholder host follows to car-grafana.k8s.stinnesbeck.com, so one *.k8s.stinnesbeck.com default certificate covers both. App 2.4.1 for the new default; the server image is unchanged (its URL comes from the manifest). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
# Public routes. TLS uses Traefik's default certificate, so there is no per-host
|
|
# Certificate here.
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: mg4-server
|
|
namespace: mg4
|
|
annotations:
|
|
# CHECK: the class of your public-facing Traefik. Your internal example uses
|
|
# "traefik-internal"; these hosts must be served by the external one.
|
|
kubernetes.io/ingress.class: traefik-external
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- kind: Rule
|
|
match: Host(`car.k8s.stinnesbeck.com`)
|
|
services:
|
|
- kind: Service
|
|
name: mg4-server
|
|
namespace: mg4
|
|
port: 80
|
|
tls: {}
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: grafana
|
|
namespace: mg4
|
|
annotations:
|
|
kubernetes.io/ingress.class: traefik-external # CHECK, as above
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- kind: Rule
|
|
# CHECK: placeholder host. It must be covered by Traefik's default certificate.
|
|
match: Host(`car-grafana.k8s.stinnesbeck.com`)
|
|
services:
|
|
- kind: Service
|
|
name: grafana
|
|
namespace: mg4
|
|
port: 80
|
|
tls: {}
|