unkinben
c2637da068
## Summary - Replace `Ingress` (nginx) with `Gateway` + `HTTPRoute` using `traefik-internal` GatewayClass - TLS terminated at the Gateway listener; cert-manager provisions the certificate via `vault-issuer` - external-dns annotations moved to the Gateway ## Notes The original Ingress had nginx-specific annotations (`proxy-body-size: 10g`, `proxy-read-timeout: 600`) which are not portable to Gateway API. These can be re-introduced via a Traefik `Middleware` CRD if needed. ## Test plan - [ ] ArgoCD syncs the app cleanly - [ ] cert-manager issues the `artifactapi-tls` certificate - [ ] external-dns creates the DNS record - [ ] `https://artifactapi.k8s.syd1.au.unkin.net` is reachable Reviewed-on: #129
32 lines
787 B
YAML
32 lines
787 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- artifactapi-deployment.yaml
|
|
- artifactapi-hpa.yaml
|
|
- configmap.yaml
|
|
- gateway.yaml
|
|
- httproute.yaml
|
|
- namespace.yaml
|
|
- postgres-deployment.yaml
|
|
- pvc.yaml
|
|
- redis-deployment.yaml
|
|
- services.yaml
|
|
- vaultauth.yaml
|
|
- vaultstaticsecret.yaml
|
|
|
|
configMapGenerator:
|
|
- name: remotes-config
|
|
files:
|
|
- resources/conf.d/config.yaml
|
|
- resources/conf.d/local-generic.yaml
|
|
- resources/conf.d/remote-generic.yaml
|
|
- resources/conf.d/remote-alpine.yaml
|
|
- resources/conf.d/remote-rpm.yaml
|
|
- resources/conf.d/remote-docker.yaml
|
|
- resources/conf.d/remote-helm.yaml
|
|
- resources/conf.d/virtual-helm.yaml
|
|
options:
|
|
disableNameSuffixHash: true
|