Externalize networking (welcome Wild Central!)

headlamp/versions/v0/ingress.yaml

@@ -1,64 +1,18 @@
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
+apiVersion: networking.k8s.io/v1
+kind: Ingress
 metadata:
-  name: internal-only
+  name: headlamp
   namespace: headlamp
 spec:
-  ipWhiteList:
-    sourceRange:
-      - 127.0.0.1/32
-      - 10.0.0.0/8
-      - 172.16.0.0/12
-      - 192.168.0.0/16
-
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: headlamp-redirect-scheme
-  namespace: headlamp
-spec:
-  redirectScheme:
-    scheme: https
-    permanent: true
-
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: headlamp-https
-  namespace: headlamp
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`headlamp.{{ .internalDomain }}`)
-      kind: Rule
-      middlewares:
-        - name: internal-only
-          namespace: headlamp
-      services:
-        - name: headlamp
-          port: 80
-  tls:
-    secretName: wildcard-internal-wild-cloud-tls
-
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: headlamp-http
-  namespace: headlamp
-spec:
-  entryPoints:
-    - web
-  routes:
-    - match: Host(`headlamp.{{ .internalDomain }}`)
-      kind: Rule
-      middlewares:
-        - name: headlamp-redirect-scheme
-          namespace: headlamp
-      services:
-        - name: headlamp
-          port: 80
+  ingressClassName: traefik
+  rules:
+    - host: headlamp.{{ .internalDomain }}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: headlamp
+                port:
+                  number: 80

headlamp/versions/v0/manifest.yaml

@@ -1,11 +1,13 @@
-version: v0.42.0
-requires:
-  - name: traefik
-  - name: cert-manager
+version: v0.42.0-1
 defaultConfig:
   namespace: headlamp
-  internalDomain: "{{ .cloud.internalDomain }}"
+  internalDomain: '{{ .cloud.internalDomain }}'
+  central:
+    ipAllow:
+    - 10.0.0.0/8
+    - 172.16.0.0/12
+    - 192.168.0.0/16
 deploy:
   waitForRollout:
     name: headlamp
-    timeout: "120s"
+    timeout: 120s