Ingres is now my buddy

This commit is contained in:
Simen Røstvik 2022-12-07 14:27:01 +01:00
parent e2af3c344b
commit fa445c91f6
2 changed files with 21 additions and 40 deletions

View File

@ -56,23 +56,32 @@ spec:
- port: 8080
targetPort: 8080
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
# add an annotation indicating the issuer to use.
cert-manager.io/acme-challenge-type: dns01
cert-manager.io/cluster-issuer: roxedus.com-cloudflare
name: searxng
namespace: default
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: Host("searxng.roxedus.com")
priority: 10
services:
- name: searxng
port: 8080
ingressClassName: traefik
rules:
- host: searxng.roxedus.com
http:
paths:
- pathType: Prefix
path: /
backend:
service:
name: searxng
port:
number: 8080
tls:
certResolver: cloudflare
- hosts:
- searxng.roxedus.com
secretName: searxng-roxedus-com-cert
---
apiVersion: v1
kind: ConfigMap

View File

@ -52,31 +52,3 @@ spec:
# dnsNames:
# - 'roxedus.com'
# - '*.roxedus.com'
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
# add an annotation indicating the issuer to use.
cert-manager.io/acme-challenge-type: dns01
cert-manager.io/cluster-issuer: roxedus.com-cloudflare
traefik.ingress.kubernetes.io/router.middlewares: authentik-ak-outpost-localcluster@kubernetescrd
name: testingress
namespace: default
spec:
ingressClassName: traefik
rules:
- host: test.roxedus.com
http:
paths:
- pathType: Prefix
path: /
backend:
service:
name: searxng
port:
number: 8080
tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
- hosts:
- test.roxedus.com
secretName: test-roxedus-com-cert # < cert-manager will store the created certificate in this secret.