From db360903582ca6321d1bc69a12dddca5c530434e Mon Sep 17 00:00:00 2001
From: Teck Meng <furyx@hotmail.com>
Date: Sun, 4 Aug 2024 13:55:21 +0800
Subject: [PATCH] Refactor Docker and Kubernetes configurations to update Redis
 volume mapping and constraints for Docmost service

---
 ansible/rke2/readme.md        | 34 +++++++++++++++++-----------------
 kubernetes/talos/traefik.yaml |  6 +++---
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/ansible/rke2/readme.md b/ansible/rke2/readme.md
index 3456692..ff2ff98 100644
--- a/ansible/rke2/readme.md
+++ b/ansible/rke2/readme.md
@@ -82,6 +82,8 @@ kubectl get secret --namespace cattle-system bootstrap-secret -o go-template='{{
 ```
 
 ```bash
+sudo service open-iscsi status
+sudo apt install open-iscsi
 kubectl -n cattle-system get deploy rancher
 
 kubectl -n cattle-system rollout status deploy/rancher
@@ -89,28 +91,26 @@ kubectl -n cattle-system get deploy rancher
 kubectl get svc -n cattle-system
 kubectl expose deployment rancher --name=rancher-lb --port=443 --type=LoadBalancer -n cattle-system
 kubectl get svc -n cattle-system
-kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.6.2/deploy/longhorn.yaml
+# kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.6.2/deploy/longhorn.yaml
+# k delete -f https://raw.githubusercontent.com/longhorn/longhorn/v1.6.2/deploy/longhorn.yaml
+helm repo add longhorn https://charts.longhorn.io
+helm repo update
+helm install longhorn longhorn/longhorn --namespace longhorn-system --create-namespace --version 1.6.2
 kubectl get pods \
 --namespace longhorn-system \
 --watch
-k delete -f https://raw.githubusercontent.com/longhorn/longhorn/v1.6.2/deploy/longhorn.yaml
-kubectl apply -f https://raw.githubusercontent.com/JamesTurland/JimsGarage/main/Kubernetes/Longhorn/longhorn.yaml
-kubectl get pods \
---namespace longhorn-system \
---watch
-sudo service open-iscsi status
-sudo apt install open-iscsi
-kubectl get pods \
---namespace longhorn-system \
---watch
-kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.6.2/deploy/longhorn.yaml
 kubectl -n longhorn-system get pod
 kubectl get svc
-k apply -f kube-vip
-helm repo add longhorn https://charts.longhorn.io
-helm install my-longhorn longhorn/longhorn --version 1.6.2
 helm repo add traefik https://traefik.github.io/charts
+helm install traefik traefik/traefik --create-namespace -n 'traefik' -f traefik.yaml
+helm list -n traefik
+kubectl -n traefik port-forward $(kubectl get pods --selector "app.kubernetes.io/name=traefik" --output=name -A) 9000:9000 --address 0.0.0.0
+# Update repository
 helm repo update
-helm install my-traefik traefik/traefik --version 29.0.0
-kubectl create namespace traefik
+# See current Chart & Traefik version
+helm search repo traefik/traefik
+# Update CRDs (Traefik Proxy v3 CRDs)
+kubectl apply --server-side --force-conflicts -k https://github.com/traefik/traefik-helm-chart/traefik/crds/
+# Upgrade Traefik
+helm upgrade traefik traefik/traefik
 ```
\ No newline at end of file
diff --git a/kubernetes/talos/traefik.yaml b/kubernetes/talos/traefik.yaml
index 825decf..5354885 100644
--- a/kubernetes/talos/traefik.yaml
+++ b/kubernetes/talos/traefik.yaml
@@ -176,7 +176,7 @@ gatewayClass:
 ingressRoute:
   dashboard:
     # -- Create an IngressRoute for the dashboard
-    enabled: false
+    enabled: true
     # -- Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class)
     annotations: {}
     # -- Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels)
@@ -604,7 +604,7 @@ ports:
     # If you want to access it from outside your cluster,
     # use `kubectl port-forward` or create a secure ingress
     expose:
-      default: false
+      default: true
     # -- The exposed port for this service
     exposedPort: 9000
     # -- The port protocol (TCP/UDP)
@@ -810,7 +810,7 @@ persistence:
   # -- Enable persistence using Persistent Volume Claims
   # ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
   # It can be used to store TLS certificates, see `storage` in certResolvers
-  enabled: false
+  enabled: true
   name: data
   #  existingClaim: ""
   accessMode: ReadWriteOnce