Reorganized traefik

infrastructure/configs/kustomization.yaml

@@ -1,6 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./middleware.yaml
-
   - ./intel-devices

infrastructure/configs/middleware.yaml

@@ -1,34 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: default-headers
-  namespace: default
-spec:
-  headers:
-    browserXssFilter: true
-    contentTypeNosniff: true
-    forceSTSHeader: true
-    stsIncludeSubdomains: true
-    stsPreload: true
-    stsSeconds: 15552000
-    customFrameOptionsValue: SAMEORIGIN
-    customRequestHeaders:
-      X-Forwarded-Proto: https
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: test-errors
-  namespace: default
-spec:
-  errors:
-    status:
-      - "403"
-      - "500"
-      - "501"
-      - "503"
-      - "505-599"
-    query: /{status}.html
-    service:
-      name: whoami
-      port: 80

infrastructure/controllers/kustomization.yaml

@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - akri.yaml
-  - traefik.yaml
   - cloudnative-pg.yaml
   - ./rook
   - ./topolvm

infrastructure/controllers/traefik.yaml

@@ -1,66 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: traefik
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: traefik
-  namespace: traefik
-spec:
-  interval: 1m0s
-  url: https://traefik.github.io/charts
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: traefik
-  namespace: traefik
-spec:
-  chart:
-    spec:
-      chart: traefik
-      reconcileStrategy: ChartVersion
-      sourceRef:
-        kind: HelmRepository
-        name: traefik
-      version: 31.1.1
-  interval: 1m0s
-  values:
-    deployment:
-      kind: DaemonSet
-    affinity:
-      nodeAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          nodeSelectorTerms:
-            - matchExpressions:
-                - key: node-role.kubernetes.io/master
-                  operator: Exists
-            - matchExpressions:
-                - key: node-role.kubernetes.io/control-plane
-                  operator: Exists
-    ports:
-      web:
-        redirectTo:
-          port: websecure
-      websecure:
-        middlewares:
-          - default-default-headers@kubernetescrd
-          - default-test-errors@kubernetescrd
-
-    providers:
-      kubernetesCRD:
-        allowCrossNamespace: true
-
-    # This is needed in order to properly forward the real ip to each service
-    # There are likely better ways of handling that, but for now this works
-    # TODO(Tim): Figure out how to properly forward the IP
-    # hostNetwork: true
-    service:
-      spec:
-        externalTrafficPolicy: Local
-    # updateStrategy:
-    #   rollingUpdate:
-    #     maxUnavailable: 2
-    #     maxSurge: 0