willemjan
f261cdde66
- ingress.yaml had invalid 'https:' rules key (dropped by apiserver -> OutOfSync);
replaced by IngressRoute on websecure with scheme:https + ServersTransport
(insecureSkipVerify) since Proxmox :8006 is https with self-signed cert
- EndpointSlice apply fails with kubectl 1.31 vs server 1.36 ('unknown field
spec'), so keep v1 Endpoints (auto-mirrored to EndpointSlice); fixed spec
- shared namespace+middleware moved to services/external (app 'external')
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
30 lines
776 B
YAML
30 lines
776 B
YAML
# Proxmox (:8006) spricht HTTPS met een self-signed cert — daarom een
|
|
# IngressRoute (i.p.v. een plain Ingress, die altijd HTTP naar de backend praat)
|
|
# met scheme: https en een ServersTransport die het cert niet checkt.
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: ServersTransport
|
|
metadata:
|
|
name: proxmox-insecure
|
|
namespace: external
|
|
spec:
|
|
insecureSkipVerify: true
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: external-proxmox
|
|
namespace: external
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
tls:
|
|
secretName: external-proxmox-labzand-tls
|
|
routes:
|
|
- match: Host(`proxmox.labzand.com`)
|
|
kind: Rule
|
|
services:
|
|
- name: proxmox-external
|
|
port: 8006
|
|
scheme: https
|
|
serversTransport: proxmox-insecure
|