Both IngressRoutes (server and Grafana) now use traefik-internal, like the rest of *.k8s.stinnesbeck.com, instead of the traefik-external placeholder. README and SPECS updated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
43 lines
1.0 KiB
YAML
43 lines
1.0 KiB
YAML
# Routes on the traefik-internal class, like the rest of *.k8s.stinnesbeck.com. TLS uses
|
|
# Traefik's default certificate, so there is no per-host Certificate here.
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: mg4-server
|
|
namespace: mg4
|
|
annotations:
|
|
kubernetes.io/ingress.class: traefik-internal
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- kind: Rule
|
|
match: Host(`car.k8s.stinnesbeck.com`)
|
|
services:
|
|
- kind: Service
|
|
name: mg4-server
|
|
namespace: mg4
|
|
port: 80
|
|
tls: {}
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: grafana
|
|
namespace: mg4
|
|
annotations:
|
|
kubernetes.io/ingress.class: traefik-internal
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- kind: Rule
|
|
# CHECK: placeholder host. It must be covered by Traefik's default certificate.
|
|
match: Host(`car-grafana.k8s.stinnesbeck.com`)
|
|
services:
|
|
- kind: Service
|
|
name: grafana
|
|
namespace: mg4
|
|
port: 80
|
|
tls: {}
|