test de ingressroute

kustomize/depl.yml

@@ -1,7 +1,7 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: "ip-deployment"
+  name: "ip"
   labels:
     app: "front"
 spec:
@@ -16,6 +16,19 @@ spec:
       containers:
         - name:  "front-apache"
           image: "jcabillot/ip"
+          ports:
+            - name: "http"
+              containerPort: 8080
+              protocol: "TCP"
+          livenessProbe:
+            httpGet:
+              path: "/"
+              port: "http"
+          readinessProbe:
+            httpGet:
+              path: "/"
+              port: "http"
+
   replicas: 1
   selector:
     matchLabels:

kustomize/ingress.yml

@@ -1,25 +1,25 @@
 ---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: "ip-deployment"
-  annotations:
-    kubernetes.io/ingress.class: "traefik"
-    traefik.ingress.kubernetes.io/router.entrypoints: "web,websecure"
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-spec:
-  tls:
-    - hosts:
-        - "ip.opti.cabillot.eu"
-      secretName: "ipcabilloteu-tls"
-  rules:
-  - host: "ip.opti.cabillot.eu"
-    http:
-      paths:
-      - path: "/"
-        pathType: "Prefix"
-        backend:
-          service:
-            name: "ip-deployment"
-            port:
-              name: "http"
+#apiVersion: networking.k8s.io/v1
+#kind: Ingress
+#metadata:
+#  name: "ip"
+#  annotations:
+#    kubernetes.io/ingress.class: "traefik"
+#    traefik.ingress.kubernetes.io/router.entrypoints: "web,websecure"
+#    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+#spec:
+#  tls:
+#    - hosts:
+#        - "ip.opti.cabillot.eu"
+#      secretName: "ipcabilloteu-tls"
+#  rules:
+#  - host: "ip.opti.cabillot.eu"
+#    http:
+#      paths:
+#      - path: "/"
+#        pathType: "Prefix"
+#        backend:
+#          service:
+#            name: "ip"
+#            port:
+#              name: "http"

kustomize/ingressroute.yml

@@ -0,0 +1,50 @@
+---
+# TODO: Named port for service
+# but currently unsupported on my k3s cluster https://github.com/traefik/traefik/pull/7668
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: "ip-websecure"
+spec:
+  entryPoints:
+    - "websecure"
+  routes:
+  - kind: Rule
+    match: Host(`ip.opti.cabillot.eu`)
+    middlewares: []
+    priority: 10
+    services:
+    - kind: Service
+      name: "ip"
+      port: 80
+  tls:
+    secretName: "ipcabilloteu-tls"
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: "ip-web"
+spec:
+  entryPoints:
+    - "web"
+  routes:
+  - match: Host(`ip.opti.cabillot.eu`)
+    kind: Rule
+    priority: 10
+    services:
+    # in this IngressRoute the service will be never called
+    # because of the redirect middleware BUT DO NOT REMOVE !
+    - kind: Service
+      name: "ip"
+      port: 80
+    middlewares:
+    - name: "httpsredirect"
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: "httpsredirect"
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true

kustomize/kustomization.yaml

@@ -1,7 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
- 
 resources:
 - depl.yml
 - ingress.yml
+- ingressroute.yml
 - svc.yml

kustomize/svc.yml

@@ -1,13 +1,13 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: 'ip-deployment'
+  name: 'ip'
 spec:
   type: "ClusterIP"
   ports:
     - name: "http"
       port: 80
       protocol: "TCP"
-      targetPort: 8080
+      targetPort: "http"
   selector:
     app: "front"