feat(tekton): deploy ingress for tekton dashboard #2242

kubernetes/talos-flux/apps/devops/tekton/app/ingress.yaml

@@ -0,0 +1,39 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    hajimari.io/enable: "true"
+    hajimari.io/icon: simple-icons:tekton
+    kubernetes.io/tls-acme: "true"
+    traefik.ingress.kubernetes.io/affinity: "true"
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: traefik-ingress-sso@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls: "true"
+  labels:
+    app.kubernetes.io/instance: tekton-dashboard
+    app.kubernetes.io/name: tekton-dashboard
+  name: tekton-dashboard
+  namespace: tekton-pipelines
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: &host tekton.${SECRET_DOMAIN}
+      http:
+        paths:
+          - backend:
+              service:
+                name: tekton-dashboard
+                port:
+                  number: 9097
+            path: /
+            pathType: Prefix
+  tls:
+    - hosts:
+        - *host
+      secretName: tekton-dashboard-tls
+status:
+  loadBalancer:
+    ingress:
+      - ip: 192.168.1.80

kubernetes/talos-flux/apps/devops/tekton/app/kustomization.yaml

@@ -11,6 +11,7 @@ resources:
   - https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.3/interceptors.yaml
   # https://github.com/tektoncd/dashboard/releases
   - https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.42.0/release.yaml
+  - ./ingress.yaml
 # patches:
 #   # Remove namesapce tekton-pipelines
 #   - patch: |