REFACTOR(apps): integrate ingress to helm-values

- code-server: move ingress to helm-values, rbac to manifests
- headlamp: move ingress to helm-values, external-secret to manifests

code-server/helm-values.yaml

@@ -16,9 +16,24 @@ persistence:
 existingSecret: code-server-password
 existingSecretKey: password
 
-# Ingress configuration (will use main ingress)
 ingress:
-  enabled: false
+  enabled: true
+  ingressClassName: traefik
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
+  hosts:
+    - host: vscode0213.kro.kr
+      paths:
+        - /
+    - host: www.vscode0213.kro.kr
+      paths:
+        - /
+  tls:
+    - secretName: code-server-tls
+      hosts:
+        - vscode0213.kro.kr
+        - www.vscode0213.kro.kr
 
 # Service configuration
 service:

code-server/ingress.yaml

@@ -1,36 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: code-server-ingress
-  namespace: code-server
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
-spec:
-  ingressClassName: traefik
-  tls:
-  - hosts:
-    - vscode0213.kro.kr
-    - www.vscode0213.kro.kr
-    secretName: code-server-tls
-  rules:
-    - host: vscode0213.kro.kr
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: code-server
-                port:
-                  number: 8080
-    - host: www.vscode0213.kro.kr
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: code-server
-                port:
-                  number: 8080

code-server/kustomization.yaml

@@ -3,5 +3,4 @@ kind: Kustomization
 namespace: code-server
 resources:
 - vault/code-server-password.yaml
-- rbac.yaml
+- manifests/rbac.yaml
-- ingress.yaml

headlamp/helm-values.yaml

@@ -26,9 +26,17 @@ resources:
   limits:
     memory: 128Mi
 
-# Ingress disabled - managed separately
 ingress:
-  enabled: false
+  enabled: true
+  ingressClassName: traefik
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  hosts:
+    - kubernetes0213.kro.kr
+  tls:
+    - secretName: headlamp-tls
+      hosts:
+        - kubernetes0213.kro.kr
 
 # Config
 config:

headlamp/ingress.yaml

@@ -1,24 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: headlamp-ingress
-  namespace: headlamp
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-spec:
-  ingressClassName: traefik
-  tls:
-  - hosts:
-    - kubernetes0213.kro.kr
-    secretName: headlamp-tls
-  rules:
-  - host: kubernetes0213.kro.kr
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: headlamp
-            port:
-              number: 80

headlamp/kustomization.yaml

@@ -1,5 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- ingress.yaml
+- manifests/external-secret.yaml
-- external-secret.yaml