update

dmz/internalproxy/templates/authentik.yaml

@@ -1,45 +1,40 @@
-apiVersion: traefik.io/v1alpha1
+#apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
+#kind: IngressRoute
-metadata:
+#metadata:
-  name: authentik-ingress
+#  name: authentik-ingress
-spec:
+#spec:
-  entryPoints:
+#  entryPoints:
-    - websecure
+#    - websecure
-  routes:
+#  routes:
-  - match: Host(`test.durp.info`) && PathPrefix(`/`) 
+#  - match: Host(`test.durp.info`) && PathPrefix(`/`) 
-    kind: Rule
+#    kind: Rule
-    services:
+#    services:
-    - name: authentik-server
+#    - name: authentik-server
-      port: 443
+#      port: 443
-  services:
+#  tls:
-    authentik-server:
+#    secretName: authentik-tls
-      loadBalancer:
+#
-        servers:
+#---
-        - url: https://google.com
+#
-  tls:
-    secretName: authentik-tls
-
----
-
 #apiVersion: v1
 #kind: Service
 #metadata:
 #  name: authentik-server
 #spec:
 #  type: ExternalName
-#  externalName: google.com
+#  externalName: authentik.durp.info
-
+#
----
+#---
-
+#
-apiVersion: cert-manager.io/v1
+#apiVersion: cert-manager.io/v1
-kind: Certificate
+#kind: Certificate
-metadata:
+#metadata:
-  name: authentik-tls
+#  name: authentik-tls
-spec:
+#spec:
-  issuerRef:
+#  issuerRef:
-    name: vault-issuer
+#    name: vault-issuer
-    kind: ClusterIssuer
+#    kind: ClusterIssuer
-  secretName: authentik-tls
+#  secretName: authentik-tls
-  commonName: "test.durp.info"
+#  commonName: "test.durp.info"
-  dnsNames:
+#  dnsNames:
-  - "test.durp.info"
+#  - "test.durp.info"

dmz/traefik/templates/config.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: traefik-configmap
+data:
+  traefik.yaml: |
+    http:
+      routers:
+        router0:
+          entryPoints:
+          - web
+          service: service-foo
+          rule: host(`test.durp.info`)
+          tls:
+            cert-resolver: default
+
+      services:
+        service-foo:
+          loadBalancer:
+            servers:
+            - url: https://authentik.infra.durp.info
+            passHostHeader: true

dmz/traefik/values.yaml

@@ -11,6 +11,10 @@ traefik:
   deployment:
     replicas: 3
     revisionHistoryLimit: 1
+    additionalVolumes:
+      - name: traefik-configmap
+        mountPath: "/config"
+        type: configMap
   
   ingressRoute:
     dashboard: