gilgamezh
3ace05a695
k3s update bumped Traefik chart 37 → 39, dropping v2 support. Replace the v2-only `whitelist.sourcerange` annotation on the gitea ingress with an `ipAllowList` Middleware (resources/gitea-middleware.yaml), referenced via `router.middlewares`. Switch the default-ns ingresses (kube-plex, radarr, sonarr, lidarr) from the deprecated `kubernetes.io/ingress.class` annotation to `spec.ingressClassName`. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
109 lines
2.2 KiB
YAML
109 lines
2.2 KiB
YAML
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
labels:
|
|
app: kube-plex
|
|
name: kube-plex
|
|
namespace: default
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: tp2.gilgamezh.me
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: plex-kube-plex
|
|
port:
|
|
number: 32400
|
|
tls:
|
|
- hosts:
|
|
- tp2.gilgamezh.me
|
|
secretName: tp2-gilgamezh-me
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
labels:
|
|
app: radarr
|
|
name: radarr
|
|
namespace: default
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: radarr.gilgamezh.me
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: radarr
|
|
port:
|
|
number: 7878
|
|
tls:
|
|
- hosts:
|
|
- radarr.gilgamezh.me
|
|
secretName: radarr-gilgamezh-me
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
labels:
|
|
app: sonarr
|
|
name: sonarr
|
|
namespace: default
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: sonarr.gilgamezh.me
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: sonarr
|
|
port:
|
|
number: 8989
|
|
tls:
|
|
- hosts:
|
|
- sonarr.gilgamezh.me
|
|
secretName: sonarr-gilgamezh-me
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
labels:
|
|
app: lidarr
|
|
name: lidarr
|
|
namespace: default
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: lidarr.gilgamezh.me
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: lidarr
|
|
port:
|
|
number: 8686
|
|
tls:
|
|
- hosts:
|
|
- lidarr.gilgamezh.me
|
|
secretName: lidarr-gilgamezh-me
|