feat: add traefik

README.md

@@ -9,9 +9,9 @@ Kubernetes Infra for setting up a modern big data lakehouse stack at home in k3s
 - [x] Disable apps deployment
 - [ ] Add infrastructure apps
 - [x] Networking
-- [ ] crds
+- [x] crds
 - [x] kubeseal
-- [ ] weave-gitops
+- [x] weave-gitops
 - [ ] traefik-proxy
 - [ ] reflector
 - [ ] rancher (update)

infrastructure/controllers/kustomization.yaml

@@ -4,3 +4,4 @@ resources:
   - cert-manager.yaml
   - ingress-nginx.yaml
   - kubeseal.yaml
+  - traefik-proxy.yaml

infrastructure/controllers/traefik-proxy.yaml

@@ -0,0 +1,84 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: traefik
+  labels:
+    toolkit.fluxcd.io/tenant: kog-team
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: traefik
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  url: https://traefik.github.io/charts
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: traefik
+  namespace: traefik
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: traefik
+      version: 'v31.1.1'
+      sourceRef:
+        kind: HelmRepository
+        name: traefik
+        namespace: flux-system
+      interval: 1m
+  values:
+    globalArguments:
+    - "--global.sendanonymoususage=false"
+    - "--global.checknewversion=false"
+
+    additionalArguments:
+    - "--serversTransport.insecureSkipVerify=true"
+    - "--log.level=DEBUG"
+
+    deployment:
+      enabled: true
+      replicas: 3
+      annotations: {}
+      podAnnotations: {}
+      additionalContainers: []
+      initContainers: []
+
+    ports:
+      web:
+        redirectTo:
+          port: websecure
+      websecure:
+        tls:
+          enabled: true
+
+    ingressRoute:
+      dashboard:
+        enabled: false
+
+    providers:
+      kubernetesCRD:
+        enabled: true
+        ingressClass: traefik-external
+        allowExternalNameServices: true
+      kubernetesIngress:
+        enabled: true
+        allowExternalNameServices: true
+        publishedService:
+          enabled: false
+
+    rbac:
+      enabled: true
+
+    service:
+      enabled: true
+      type: LoadBalancer
+      annotations: {}
+      labels: {}
+      spec:
+        loadBalancerIP: 10.22.20.130 # this should be an IP in the MetalLB range
+      loadBalancerSourceRanges: []
+      externalIPs: []