Setup linting

kubernetes/base/traefik/ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: traefik-tls
+spec:
+  secretName: traefik-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - traefik.frankoslaw.top
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dashboard
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`traefik.frankoslaw.top`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
+  tls:
+    secretName: traefik-tls

kubernetes/base/traefik/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - traefik-config.yaml
+  - traefik-redirect.yaml
+  - traefik-dashboard.yaml
+  - ingress.yaml

kubernetes/base/traefik/traefik-config.yaml

@@ -0,0 +1,44 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChartConfig
+metadata:
+  name: traefik
+  namespace: kube-system
+spec:
+  valuesContent: |-
+    image:
+        name: traefik
+    ports:
+        web:
+            port: 80
+            expose:
+                default: true
+            exposedPort: 80
+            protocol: TCP
+            redirections:
+                entryPoint:
+                    to: websecure
+                    scheme: https
+                    permanent: true
+        websecure:
+            port: 443
+            expose:
+                default: true
+            exposedPort: 443
+            protocol: TCP
+            tls:
+                enabled: true
+    ingressRoute:
+        dashboard:
+            enabled: false
+    persistence:
+        enabled: true
+        path: /certs
+        size: 128Mi
+    securityContext:
+        capabilities:
+            drop: [ALL]
+            add: [NET_BIND_SERVICE]
+        readOnlyRootFilesystem: true
+        runAsGroup: 0
+        runAsNonRoot: false
+        runAsUser: 0

kubernetes/base/traefik/traefik-dashboard.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-dashboard
+  namespace: kube-system
+  labels:
+    app.kubernetes.io/instance: traefik
+    app.kubernetes.io/name: traefik-dashboard
+spec:
+  type: ClusterIP
+  ports:
+    - name: traefik
+      port: 9000
+      targetPort: traefik
+      protocol: TCP
+  selector:
+    app.kubernetes.io/instance: traefik-kube-system
+    app.kubernetes.io/name: traefik

kubernetes/base/traefik/traefik-redirect.yaml

@@ -0,0 +1,8 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true