claw
24d0ab736c
- Change ingressClassName from nginx to traefik - Replace nginx configuration-snippet annotations with Traefik router annotations - Extract security headers into dedicated Traefik Middleware CRD - Update CI/CD pipeline to apply middleware manifest - Document migration decision and deployment steps in README ADR-002: Ingress Controller Migration (nginx → Traefik) Migration strategy: in-place update
43 lines
1.1 KiB
YAML
43 lines
1.1 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: signalledger
|
|
namespace: openclaw-private
|
|
labels:
|
|
app.kubernetes.io/name: signalledger
|
|
app.kubernetes.io/component: frontend
|
|
app.kubernetes.io/part-of: signalledger
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
traefik.ingress.kubernetes.io/router.middlewares: "openclaw-private-security-headers@kubernetescrd"
|
|
spec:
|
|
ingressClassName: traefik
|
|
tls:
|
|
- hosts:
|
|
- signalledger.nl
|
|
- www.signalledger.nl
|
|
secretName: signalledger-tls
|
|
rules:
|
|
- host: signalledger.nl
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: signalledger
|
|
port:
|
|
number: 80
|
|
- host: www.signalledger.nl
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: signalledger
|
|
port:
|
|
number: 80
|