prole/deploy/opentofu/k3s/manifests/knoe/svc-knoe-ingress.yaml
chrisfu 1892e137c1 feat(infra): replace GitLab with Gitea on git.prole.org
- Remove GitLab hostname/storage config from k3s.cfg; GitLab is gone.
- Update GITEA_HOSTNAME git-internal → git.prole.org
- Fix MONITORING_STORAGE_CLASS local-path → merlin-local-iscsi-prometheus
- Kong: route git.prole.org → gitea-http.gitea:3000
- Add svc-knoe-ingress.yaml as source-of-truth for the prole ingress (was
  missing; live object named svc-knoe-ingress, routes git.prole.org through
  Traefik → Kong → Gitea)
- DNS: add git.prole.org A record → 73.15.20.166 (public front-door)
- monitoring/kps-values-k3s.yaml: fix storage class for Prometheus/Alertmanager

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-07 01:25:32 -04:00

70 lines
1.9 KiB
YAML

# svc-knoe-ingress.yaml
# Traefik ingress for *.prole.org — routes all public domains through
# knoe-svc-kong (declarative Kong in knoe-system). cert-manager issues a
# Let's Encrypt cert (svc-prole-org-tls) for all hosts via HTTP-01.
#
# Kong routing (kong-configmap.yaml):
# api.prole.org → knoe-auth.knoe-system:8080
# db.prole.org → oauth2-proxy.supabase:4180 (Supabase Studio + Google gate)
# svc.prole.org → knoe-grafana-proxy.monitoring:80 (Grafana)
# git.prole.org → gitea-http.gitea:3000 (Gitea)
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: svc-knoe-ingress
namespace: knoe-system
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
kubernetes.io/ingress.class: traefik
traefik.ingress.kubernetes.io/router.priority: "10"
spec:
rules:
- host: svc.prole.org
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: knoe-svc-kong
port:
number: 8000
- host: api.prole.org
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: knoe-svc-kong
port:
number: 8000
- host: db.prole.org
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: oauth2-proxy
port:
number: 80
- host: git.prole.org
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: knoe-svc-kong
port:
number: 8000
tls:
- hosts:
- svc.prole.org
- api.prole.org
- db.prole.org
- git.prole.org
secretName: svc-prole-org-tls