Externalize networking (welcome Wild Central!)

This commit is contained in:
2026-07-10 03:49:38 +00:00
parent bb5a76b864
commit dc5518b57f
143 changed files with 691 additions and 1379 deletions

View File

@@ -1,64 +1,18 @@
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: internal-only
name: headlamp
namespace: headlamp
spec:
ipWhiteList:
sourceRange:
- 127.0.0.1/32
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: headlamp-redirect-scheme
namespace: headlamp
spec:
redirectScheme:
scheme: https
permanent: true
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: headlamp-https
namespace: headlamp
spec:
entryPoints:
- websecure
routes:
- match: Host(`headlamp.{{ .internalDomain }}`)
kind: Rule
middlewares:
- name: internal-only
namespace: headlamp
services:
- name: headlamp
port: 80
tls:
secretName: wildcard-internal-wild-cloud-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: headlamp-http
namespace: headlamp
spec:
entryPoints:
- web
routes:
- match: Host(`headlamp.{{ .internalDomain }}`)
kind: Rule
middlewares:
- name: headlamp-redirect-scheme
namespace: headlamp
services:
- name: headlamp
port: 80
ingressClassName: traefik
rules:
- host: headlamp.{{ .internalDomain }}
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: headlamp
port:
number: 80