unkin-agent 9b857bef64 logging: expose vlselect on internal traefik (#525) ...

Querying the VLCluster from outside the cluster (CLI tools, puppet VMs) needs a resolvable TLS endpoint for vlselect, mirroring the existing logs-ingest endpoint for vlinsert.

- add `vlselect` Gateway on `traefik-internal` with vault-issuer TLS and external-dns for `vlselect.k8s.syd1.au.unkin.net`
- add HTTP->HTTPS redirect route and HTTPS route to `vlselect-logs:9471`, unauthenticated

Reviewed-on: #525
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-05 14:08:33 +11:00

..

base

logging: expose vlselect on internal traefik (#525)

2026-10-05 14:08:33 +11:00

overlays/au-syd1

authentik: raise server cpu request to 500m (#526)

2026-10-05 14:07:45 +11:00