feat: add Gateway, ClusterIssuer, and platform-config app

This commit is contained in:
2026-07-01 19:59:23 +01:00
parent 960453e00e
commit 1cf9f1bb72
3 changed files with 78 additions and 0 deletions
+17
View File
@@ -0,0 +1,17 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: platform-config
namespace: argo-cd
spec:
project: default
source:
repoURL: git@git.jrdn.dev:JamesAllenby/homelab-platform.git
targetRevision: main
path: manifests
destination:
server: https://kubernetes.default.svc
syncPolicy:
automated:
prune: true
selfHeal: true
+16
View File
@@ -0,0 +1,16 @@
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: JamesAllenby@protonmail.com
privateKeySecretRef:
name: letsencrypt-account-key
solvers:
- http01:
gatewayHTTPRoute:
parentRefs:
- name: traefik-gateway
namespace: traefik
+45
View File
@@ -0,0 +1,45 @@
apiVersion: gateway.networking.k8s.io/v1
kind: GatewayClass
metadata:
name: traefik
spec:
controllerName: traefik.io/gateway-controller
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
name: traefik-gateway
namespace: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt
spec:
gatewayClassName: traefik
listeners:
- name: web
port: 80
protocol: HTTP
allowedRoutes:
namespaces:
from: All
- name: websecure-auth
hostname: auth.solidish.dev
port: 443
protocol: HTTPS
tls:
mode: Terminate
certificateRefs:
- name: auth-solidish-dev-tls
allowedRoutes:
namespaces:
from: All
- name: websecure-grafana
hostname: grafana.solidish.dev
port: 443
protocol: HTTPS
tls:
mode: Terminate
certificateRefs:
- name: grafana-solidish-dev-tls
allowedRoutes:
namespaces:
from: All