CHORE(k8s): switch to Traefik with Authelia SSO

- Change ingressClassName to traefik
- Add Authelia middleware for SSO

deploy/k8s/overlays/prod/ingress.yaml

@@ -3,18 +3,10 @@ kind: Ingress
 metadata:
   name: mas-ingress
   annotations:
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    # WebSocket 지원 (Chainlit UI에 필요)
-    nginx.ingress.kubernetes.io/websocket-services: "mas"
-    # 프록시 타임아웃 설정 (장시간 스트리밍 응답)
-    nginx.ingress.kubernetes.io/proxy-connect-timeout: "3600"
-    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
-    # 프록시 버퍼링 비활성화 (스트리밍 응답)
-    nginx.ingress.kubernetes.io/proxy-buffering: "off"
+    traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
 spec:
-  ingressClassName: haproxy
+  ingressClassName: traefik
   tls:
   - hosts:
     - mas0213.kro.kr

deploy/k8s/overlays/prod/kustomization.yaml

@@ -16,5 +16,5 @@ commonLabels:
 images:
   - name: ghcr.io/mayne0213/mas
     newName: ghcr.io/mayne0213/mas
-    newTag: main-sha-1aaab71aeeb87c4018501ab4233bbce11aff1871
+    newTag: main-sha-fcc2ebbbe3d47cc347e6907e65882e3eed8d2d32