Files
homelab-platform/manifests/protected-routes.yaml
T

54 lines
1.3 KiB
YAML

apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: longhorn-ui
namespace: traefik
spec:
entryPoints:
- websecure
routes:
- match: Host(`longhorn.solidish.dev`) && PathPrefix(`/outpost.goauthentik.io/`)
kind: Rule
services:
- name: ak-outpost-traefik-forwardauth
namespace: authentik
port: 9000
- match: Host(`longhorn.solidish.dev`)
kind: Rule
middlewares:
- name: authentik-forwardauth
namespace: traefik
services:
- name: longhorn-frontend
namespace: longhorn-system
port: 80
tls:
secretName: longhorn-solidish-dev-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: hubble-ui
namespace: traefik
spec:
entryPoints:
- websecure
routes:
- match: Host(`hubble.solidish.dev`) && PathPrefix(`/outpost.goauthentik.io/`)
kind: Rule
services:
- name: ak-outpost-traefik-forwardauth
namespace: authentik
port: 9000
- match: Host(`hubble.solidish.dev`)
kind: Rule
middlewares:
- name: authentik-forwardauth
namespace: traefik
services:
- name: hubble-ui
namespace: kube-system
port: 80
tls:
secretName: hubble-solidish-dev-tls