65 lines
2.5 KiB
YAML
65 lines
2.5 KiB
YAML
# Create an IngressRoute for the dashboard
|
|
ingressRoute:
|
|
dashboard:
|
|
# -- Create an IngressRoute for the dashboard
|
|
enabled: true
|
|
# -- Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class)
|
|
annotations: {}
|
|
# -- Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels)
|
|
labels: {}
|
|
# -- The router match rule used for the dashboard ingressRoute
|
|
matchRule: PathPrefix(`/dashboard`) || PathPrefix(`/api`)
|
|
# -- The internal service used for the dashboard ingressRoute
|
|
services:
|
|
- name: api@internal
|
|
kind: TraefikService
|
|
# -- Specify the allowed entrypoints to use for the dashboard ingress route, (e.g. traefik, web, websecure).
|
|
# By default, it's using traefik entrypoint, which is not exposed.
|
|
# /!\ Do not expose your dashboard without any protection over the internet /!\
|
|
entryPoints: ["traefik"]
|
|
# -- Additional ingressRoute middlewares (e.g. for authentication)
|
|
middlewares:
|
|
- name: traefik-dashboard-auth
|
|
tls: {}
|
|
healthcheck:
|
|
# -- Create an IngressRoute for the healthcheck probe
|
|
enabled: false
|
|
# -- Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class)
|
|
annotations: {}
|
|
# -- Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels)
|
|
labels: {}
|
|
# -- The router match rule used for the healthcheck ingressRoute
|
|
matchRule: PathPrefix(`/ping`)
|
|
# -- The internal service used for the healthcheck ingressRoute
|
|
services:
|
|
- name: ping@internal
|
|
kind: TraefikService
|
|
# -- Specify the allowed entrypoints to use for the healthcheck ingress route, (e.g. traefik, web, websecure).
|
|
# By default, it's using traefik entrypoint, which is not exposed.
|
|
entryPoints: ["traefik"]
|
|
# -- Additional ingressRoute middlewares (e.g. for authentication)
|
|
middlewares: []
|
|
# -- TLS options (e.g. secret containing certificate)
|
|
tls: {}
|
|
# Add custom middlewares : authentication and redirection
|
|
|
|
|
|
# Create the custom middlewares used by the IngressRoute dashboard (can also be created in another way).
|
|
# /!\ Yes, you need to replace "changeme" password with a better one. /!\
|
|
extraObjects:
|
|
- apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: traefik-dashboard-auth-secret
|
|
type: kubernetes.io/basic-auth
|
|
stringData:
|
|
username: admin
|
|
password: changeme
|
|
|
|
- apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: traefik-dashboard-auth
|
|
spec:
|
|
basicAuth:
|
|
secret: traefik-dashboard-auth-secret |