migrate ingress to tailscale

This commit is contained in:
2024-08-15 17:48:27 -05:00
parent 5100efe4a4
commit 6b412e0a09
11 changed files with 72 additions and 200 deletions

View File

@@ -1,37 +0,0 @@
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: lidatube
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: lidatube
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: web
app.kubernetes.io/part-of: {{ .Release.Name }}
annotations:
external-dns.alpha.kubernetes.io/hostname: lidatube.alexlebens.net
external-dns.alpha.kubernetes.io/target: cl01tl-endpoint.alexlebens.net
kubernetes.io/ingress.class: traefik
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: Host(`lidatube.alexlebens.net`)
middlewares:
- name: authentik-lidatube
namespace: {{ .Release.Namespace }}
priority: 10
services:
- kind: Service
name: lidatube
port: 80
- kind: Rule
match: Host(`lidatube.alexlebens.net`) && PathPrefix(`/outpost.goauthentik.io/`)"
priority: 15
services:
- kind: Service
name: authentik-outpost-proxy
port: 9000
namespace: authentik

View File

@@ -1,27 +0,0 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: authentik-lidatube
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: authentik-lidatube
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: auth
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
forwardAuth:
address: http://authentik-outpost-proxy.authentik:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version