Timo Behrendt
a3e9362d56
All checks were successful
Reviewed-on: #63 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
65 lines
1.5 KiB
YAML
65 lines
1.5 KiB
YAML
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChartConfig
|
|
metadata:
|
|
name: traefik
|
|
namespace: kube-system
|
|
spec:
|
|
valuesContent: |-
|
|
nodeSelector:
|
|
kubernetes.io/hostname: k3sh0
|
|
providers:
|
|
kubernetesCRD:
|
|
allowCrossNamespace: true
|
|
certResolvers:
|
|
letsencrypt:
|
|
email: admin@t00n.de
|
|
dnsChallenge:
|
|
provider: ionos
|
|
delayBeforeCheck: 60
|
|
resolvers:
|
|
- 1.1.1.1
|
|
storage: /data/acme-ionos.json
|
|
ingressRoute:
|
|
dashboard:
|
|
enabled: true
|
|
matchRule: Host(`traefik.monitor.k8s.t000-n.de`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
|
|
middlewares:
|
|
- name: localipfilter
|
|
entryPoints: ["websecure"]
|
|
env:
|
|
- name: IONOS_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: apiKey
|
|
name: ionos-api-credentials
|
|
ports:
|
|
web:
|
|
port: 8000
|
|
expose: true
|
|
exposedPort: 80
|
|
nodePort: 32080
|
|
websecure:
|
|
port: 8443
|
|
expose: true
|
|
exposedPort: 443
|
|
nodePort: 32443
|
|
tls:
|
|
enabled: true
|
|
certResolver: "letsencrypt"
|
|
service:
|
|
enabled: true
|
|
single: true
|
|
type: LoadBalancer
|
|
spec:
|
|
externalTrafficPolicy: Local
|
|
externalIPs:
|
|
- 192.168.0.50
|
|
- 192.168.0.51
|
|
- 192.168.0.52
|
|
- 192.168.0.53
|
|
persistence:
|
|
enabled: true
|
|
name: data
|
|
existingClaim: pvc-traefik
|
|
path: /data
|