Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(capacitor): update traefik annotations #2697

Merged
merged 1 commit into from
Mar 15, 2024
Merged

fix(capacitor): update traefik annotations #2697

merged 1 commit into from
Mar 15, 2024

Conversation

tyriis
Copy link
Owner

@tyriis tyriis commented Mar 15, 2024

No description provided.

Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@tyriis-automation
Copy link
Contributor

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ EDITORCONFIG editorconfig-checker 1 0 0.01s
✅ REPOSITORY gitleaks yes no 2.15s
✅ YAML prettier 1 0 0.51s
✅ YAML yamllint 1 0 0.29s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@tyriis-automation
Copy link
Contributor

--- kubernetes/talos-flux/apps/flux-system/capacitor/app Kustomization: flux-system/apps-capacitor HelmRelease: flux-system/capacitor

+++ kubernetes/talos-flux/apps/flux-system/capacitor/app Kustomization: flux-system/apps-capacitor HelmRelease: flux-system/capacitor

@@ -81,14 +81,16 @@

       app:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           hajimari.io/enable: 'true'
           hajimari.io/icon: simple-icons:flux
           kubernetes.io/tls-acme: 'true'
-          nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
-          nginx.ingress.kubernetes.io/ssl-redirect: 'true'
+          traefik.ingress.kubernetes.io/affinity: 'true'
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+          traefik.ingress.kubernetes.io/router.middlewares: traefik-ingress-sso@kubernetescrd
+          traefik.ingress.kubernetes.io/router.tls: 'true'
         className: nginx
         enabled: true
         hosts:
         - host: '{{ .Release.Name }}.${SECRET_DOMAIN}'
           paths:
           - path: /

@tyriis-automation
Copy link
Contributor

--- HelmRelease: flux-system/capacitor Ingress: flux-system/capacitor

+++ HelmRelease: flux-system/capacitor Ingress: flux-system/capacitor

@@ -9,14 +9,16 @@

     app.kubernetes.io/name: capacitor
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
     hajimari.io/enable: 'true'
     hajimari.io/icon: simple-icons:flux
     kubernetes.io/tls-acme: 'true'
-    nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
-    nginx.ingress.kubernetes.io/ssl-redirect: 'true'
+    traefik.ingress.kubernetes.io/affinity: 'true'
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: traefik-ingress-sso@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls: 'true'
 spec:
   ingressClassName: nginx
   tls:
   - hosts:
     - capacitor.${SECRET_DOMAIN}
     secretName: capacitor-tls

@tyriis tyriis merged commit 92bd703 into main Mar 15, 2024
15 checks passed
@tyriis tyriis deleted the feature/capacitor branch March 15, 2024 23:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant