Serve grafana.unkin.net from traefik-external

Add a grafana-external Gateway and routes on the *.unkin.net wildcard, point the A record at the external VIP, set root_url to grafana.unkin.net and drop grafana from the haproxy edge.
2026-10-05 00:31:16 +11:00
parent 115cdd492f
commit e5be6ab5a2
9 changed files with 107 additions and 23 deletions
@@ -0,0 +1,15 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: grafana-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: unkin-net
+  name: grafana
+  type: A
+  ttl: 600
+  values:
+    # traefik-EXTERNAL (DMZ) gateway VIP; the grafana-external Gateway serves
+    # grafana.unkin.net there.
+    - 198.18.199.0
@@ -9,6 +9,7 @@ resources:
  # record itself.
  # - git.yaml
  - ghp.yaml
+  - grafana.yaml
  - identity.yaml
  - lb1.yaml
  - logviewer.yaml