Use authelia to secure traefik

infrastructure/controllers/traefik.yaml

@@ -45,13 +45,18 @@ spec:
         redirectTo:
           port: websecure
 
+    providers:
+      kubernetesCRD:
+        allowCrossNamespace: true
+
     # This is needed in order to properly forward the real ip to each service
     # There are likely better ways of handling that, but for now this works
-    hostNetwork: true
-    service:
-      spec:
-        externalTrafficPolicy: Local
-    updateStrategy:
-      rollingUpdate:
-        maxUnavailable: 2
-        maxSurge: 0
+    # TODO(Tim): Figure out how to properly forward the IP
+    # hostNetwork: true
+    # service:
+    #   spec:
+    #     externalTrafficPolicy: Local
+    # updateStrategy:
+    #   rollingUpdate:
+    #     maxUnavailable: 2
+    #     maxSurge: 0