autojanet/k8s/manifests/intake-ingress.yaml
Zoë 7b5eb15292
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
fix: intake ingress use companion Ingress pattern for external-dns + cert-manager
2026-05-30 20:45:43 -07:00

40 lines
964 B
YAML

---
# IngressRoute: janet.ctz.fyi → intake service
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: intake
namespace: autojanet
annotations:
external-dns/internal: "true"
external-dns.alpha.kubernetes.io/hostname: janet.ctz.fyi
spec:
entryPoints:
- websecure
routes:
- match: Host(`janet.ctz.fyi`)
kind: Rule
services:
- name: intake
port: 80
tls:
secretName: janet-ctz-fyi-tls
---
# Companion Ingress — cert-manager issues the cert, external-dns picks up the hostname
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: intake-dns
namespace: autojanet
annotations:
external-dns/internal: "true"
external-dns.alpha.kubernetes.io/hostname: janet.ctz.fyi
cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
ingressClassName: traefik
tls:
- hosts:
- janet.ctz.fyi
secretName: janet-ctz-fyi-tls
rules:
- host: janet.ctz.fyi