feat: nginx ingressClassName

cluster/apps/data/bookstack/helm-release.yaml

@@ -59,9 +59,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: bookstack.${SECRET_CLUSTER_DOMAIN}

cluster/apps/data/freshrss/helm-release.yaml

@@ -42,10 +42,9 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
+        #   traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: freshrss.${SECRET_CLUSTER_DOMAIN}
             paths:

cluster/apps/data/hajimari/helm-release.yaml

@@ -100,9 +100,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "hajimari.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/data/homer/helm-release.yaml

@@ -40,7 +40,7 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
           kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
@@ -76,9 +76,8 @@ spec:
           - "/www/assets/.vscode"
         ingress:
           enabled: true
-          # ingressClassName: "traefik"
+          ingressClassName: "nginx"
-          annotations:
+          # annotations:
-            kubernetes.io/ingress.class: "nginx"
             # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
             # traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
           hosts:

cluster/apps/data/joplin-server/helm-release.yaml

@@ -41,9 +41,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "joplin.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/data/pgadmin/helm-release.yaml

@@ -31,7 +31,6 @@ spec:
     ingress:
       enabled: true
       annotations:
-        kubernetes.io/ingress.class: "nginx"
         # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         # traefik.ingress.kubernetes.io/router.middlewares: networking-buffering-medium@kubernetescrd
       hosts:
@@ -43,13 +42,13 @@ spec:
         - hosts:
             - "pgadmin.${SECRET_CLUSTER_DOMAIN}"
           secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
-  # postRenderers:
+  postRenderers:
-  #   - kustomize:
+    - kustomize:
-  #       patchesJson6902:
+        patchesJson6902:
-  #         - target:
+          - target:
-  #             kind: Ingress
+              kind: Ingress
-  #             name: pgadmin-pgadmin4
+              name: pgadmin-pgadmin4
-  #           patch:
+            patch:
-  #             - op: add
+              - op: add
-  #               path: /spec/ingressClassName
+                path: /spec/ingressClassName
-  #               value: traefik
+                value: nginx

cluster/apps/data/recipes/helm-release.yaml

@@ -62,9 +62,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
           # traefik.ingress.kubernetes.io/router.middlewares: networking-buffering-small@kubernetescrd
         hosts:

cluster/apps/data/resilio-sync/statefulset.yaml

@@ -205,8 +205,7 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
+  # annotations:
-    kubernetes.io/ingress.class: "nginx"
     # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
   labels:
     app.kubernetes.io/instance: resilio-sync
@@ -214,7 +213,7 @@ metadata:
   name: resilio-sync
   namespace: data
 spec:
-  # ingressClassName: "traefik"
+  ingressClassName: "nginx"
   tls:
     - hosts:
         - "resilio-sync-claude.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/data/sharry/helm-release.yaml

@@ -114,9 +114,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
           # traefik.ingress.kubernetes.io/router.middlewares: networking-buffering-large@kubernetescrd
         hosts:

cluster/apps/data/vaultwarden/helm-release.yaml

@@ -52,9 +52,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "vaultwarden.${SECRET_CLUSTER_DOMAIN}"
@@ -66,12 +65,7 @@ spec:
               - path: /notifications/hub
                 pathType: Prefix
                 servicePort: 3012
-          - host: "bitwarden.${SECRET_CLUSTER_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
         tls:
           - hosts:
               - "vaultwarden.${SECRET_CLUSTER_DOMAIN}"
-              - "bitwarden.${SECRET_CLUSTER_DOMAIN}"
             secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"

cluster/apps/data/vikunja/helm-release.yaml

@@ -42,9 +42,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "vikunja.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/data/wallabag/helm-release.yaml

@@ -63,9 +63,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "wallabag.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/development/docker-registry/helm-release.yaml

@@ -40,7 +40,6 @@ spec:
     ingress:
       enabled: true
       annotations:
-        kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/proxy-body-size: "0"
         nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
         nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
@@ -53,13 +52,13 @@ spec:
             - "registry.${SECRET_CLUSTER_DOMAIN}"
           secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
 
-  # postRenderers:
+  postRenderers:
-  #   - kustomize:
+    - kustomize:
-  #       patchesJson6902:
+        patchesJson6902:
-  #         - target:
+          - target:
-  #             kind: Ingress
+              kind: Ingress
-  #             name: docker-registry
+              name: docker-registry
-  #           patch:
+            patch:
-  #             - op: add
+              - op: add
-  #               path: /spec/ingressClassName
+                path: /spec/ingressClassName
-  #               value: traefik
+                value: nginx

cluster/apps/development/drone/helm-release.yaml

@@ -44,8 +44,7 @@ spec:
 
     ingress:
       enabled: true
-      annotations:
+      # annotations:
-        kubernetes.io/ingress.class: "nginx"
         # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
       hosts:
         - host: "drone.${SECRET_CLUSTER_DOMAIN}"
@@ -54,11 +53,13 @@ spec:
         - hosts:
             - "wallabag.${SECRET_CLUSTER_DOMAIN}"
           secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
-  # postRenderers:
+  postRenderers:
-  #   - kustomize:
+    - kustomize:
-  #       patchesJson6902:
+        patchesJson6902:
-  #             name: drone
+          - target:
-  #           patch:
+              kind: Ingress
-  #             - op: add
+              name: drone
-  #               path: /spec/ingressClassName
+            patch:
-  #               value: traefik
+              - op: add
+                path: /spec/ingressClassName
+                value: traefik

cluster/apps/development/gitea/helm-release.yaml

@@ -87,8 +87,7 @@ spec:
 
     ingress:
       enabled: true
-      annotations:
+      # annotations:
-        kubernetes.io/ingress.class: "nginx"
         # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
       hosts:
         - host: "gitea.${SECRET_CLUSTER_DOMAIN}"
@@ -100,13 +99,13 @@ spec:
             - "gitea.${SECRET_CLUSTER_DOMAIN}"
           secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
 
-  # postRenderers:
+  postRenderers:
-  #   - kustomize:
+    - kustomize:
-  #       patchesJson6902:
+        patchesJson6902:
-  #         - target:
+          - target:
-  #             kind: Ingress
+              kind: Ingress
-  #             name: gitea
+              name: gitea
-  #           patch:
+            patch:
-  #             - op: add
+              - op: add
-  #               path: /spec/ingressClassName
+                path: /spec/ingressClassName
-  #               value: traefik
+                value: nginx

cluster/apps/home-automation/emqx/helm-release.yaml

@@ -60,8 +60,7 @@ spec:
     ingress:
       dashboard:
         enabled: true
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         path: /
         hosts:
@@ -103,10 +102,10 @@ spec:
                 path: /spec/externalIPs
                 value:
                   - "${CLUSTER_LB_EMQX}"
-          # - target:
+          - target:
-          #     kind: Ingress
+              kind: Ingress
-          #     name: emqx-dashboard
+              name: emqx-dashboard
-          #   patch:
+            patch:
-          #     - op: add
+              - op: add
-          #       path: /spec/ingressClassName
+                path: /spec/ingressClassName
-          #       value: traefik
+                value: nginx

cluster/apps/home-automation/frigate/helm-release.yaml

@@ -95,9 +95,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

cluster/apps/home-automation/home-assistant/helm-release.yaml

@@ -50,9 +50,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "hass.${SECRET_CLUSTER_DOMAIN}"
@@ -111,9 +110,8 @@ spec:
           - "/config/.vscode"
         ingress:
           enabled: true
-          # ingressClassName: "traefik"
+          ingressClassName: "nginx"
           annotations:
-          kubernetes.io/ingress.class: "nginx"
             nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
             nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
             # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

cluster/apps/home-automation/zigbee2mqtt/helm-release.yaml

@@ -73,9 +73,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

cluster/apps/home-automation/zwavejs2mqtt/helm-release.yaml

@@ -37,7 +37,7 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
           kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"

cluster/apps/media/bazarr/helm-release.yaml

@@ -48,9 +48,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |

cluster/apps/media/flood/helm-release.yaml

@@ -48,9 +48,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |

cluster/apps/media/jellyfin/helm-release.yaml

@@ -48,9 +48,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
         #  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "jellyfin.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/lidarr/helm-release.yaml

@@ -56,9 +56,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |
@@ -77,9 +76,8 @@ spec:
               - "lidarr.${SECRET_CLUSTER_DOMAIN}"
       api:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "lidarr.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/lychee/helm-release.yaml

@@ -51,9 +51,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
         #   traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "lychee.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/navidrome/helm-release.yaml

@@ -48,9 +48,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "navidrome.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/prowlarr/helm-release.yaml

@@ -39,9 +39,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |

cluster/apps/media/pyload/helm-release.yaml

@@ -43,9 +43,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

cluster/apps/media/qbittorrent/helm-release.yaml

@@ -63,9 +63,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/configuration-snippet: |
             proxy_set_header Accept-Encoding "";
             sub_filter '</head>' '<link rel="stylesheet" type="text/css" href="https://gilbn.github.io/theme.park/CSS/themes/qbittorrent/space-gray.css"></head>';

cluster/apps/media/radarr/helm-release.yaml

@@ -53,9 +53,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |
@@ -74,9 +73,8 @@ spec:
               - "radarr.${SECRET_CLUSTER_DOMAIN}"
       api:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
         #  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "radarr.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/readarr/helm-release.yaml

@@ -48,9 +48,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |
@@ -69,9 +68,8 @@ spec:
               - "readarr.${SECRET_CLUSTER_DOMAIN}"
       api:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
         #  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "readarr.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/sabnzbd/helm-release.yaml

@@ -46,9 +46,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |
@@ -67,10 +66,9 @@ spec:
               - "sabnzbd.${SECRET_CLUSTER_DOMAIN}"
       api:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         nameSuffix: "api"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
         #  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "sabnzbd.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/sonarr/helm-release.yaml

@@ -51,9 +51,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           nginx.ingress.kubernetes.io/configuration-snippet: |
@@ -72,9 +71,8 @@ spec:
               - "sonarr.${SECRET_CLUSTER_DOMAIN}"
       api:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
         #   traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "sonarr.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/media/tdarr/helm-release.yaml

@@ -62,9 +62,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

cluster/apps/media/travelstories/deployment.yaml

@@ -75,7 +75,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   annotations:
-    kubernetes.io/ingress.class: "nginx"
     nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
     nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
     # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
@@ -86,7 +85,7 @@ metadata:
   name: travelstories
   namespace: media
 spec:
-  # ingressClassName: "traefik"
+  ingressClassName: "nginx"
   rules:
     - host: "travelstories.${SECRET_CLUSTER_DOMAIN}"
       http:

cluster/apps/monitoring/blackbox-exporter/helm-release.yaml

@@ -91,7 +91,6 @@ spec:
     ingress:
       enabled: true
       annotations:
-        kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
         nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
         # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
@@ -106,13 +105,13 @@ spec:
             - "blackbox.${SECRET_CLUSTER_DOMAIN}"
           secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
 
-  # postRenderers:
+  postRenderers:
-  #   - kustomize:
+    - kustomize:
-  #       patchesJson6902:
+        patchesJson6902:
-  #         - target:
+          - target:
-  #             kind: Ingress
+              kind: Ingress
-  #             name: blackbox-exporter-prometheus-blackbox-exporter
+              name: blackbox-exporter-prometheus-blackbox-exporter
-  #           patch:
+            patch:
-  #             - op: add
+              - op: add
-  #               path: /spec/ingressClassName
+                path: /spec/ingressClassName
-  #               value: traefik
+                value: nginx

cluster/apps/monitoring/healthchecks/helm-release.yaml

@@ -54,9 +54,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "healthchecks.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml

@@ -32,9 +32,8 @@ spec:
       ingress:
         enabled: true
         pathType: Prefix
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
@@ -209,9 +208,8 @@ spec:
       ingress:
         enabled: true
         pathType: Prefix
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts: ["grafana.${SECRET_CLUSTER_DOMAIN}"]
         tls:
@@ -229,9 +227,8 @@ spec:
       ingress:
         enabled: true
         pathType: Prefix
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

cluster/apps/monitoring/thanos/helm-release.yaml

@@ -29,7 +29,6 @@ spec:
         enabled: true
         hostname: "thanos.${SECRET_CLUSTER_DOMAIN}"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
           nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
           nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
@@ -61,13 +60,13 @@ spec:
         secret_key: "${SECRET_MINIO_SECRET_KEY}"
         insecure: false
 
-  # postRenderers:
+  postRenderers:
-  #   - kustomize:
+    - kustomize:
-  #       patchesJson6902:
+        patchesJson6902:
-  #         - target:
+          - target:
-  #             kind: Ingress
+              kind: Ingress
-  #             name: thanos-query
+              name: thanos-query
-  #           patch:
+            patch:
-  #             - op: add
+              - op: add
-  #               path: /spec/ingressClassName
+                path: /spec/ingressClassName
-  #               value: traefik
+                value: nginx

cluster/apps/monitoring/uptime-kuma/statefulset.yaml

@@ -67,8 +67,7 @@ spec:
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  annotations:
+  # annotations:
-    kubernetes.io/ingress.class: "nginx"
     # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
   labels:
     app.kubernetes.io/instance: uptime-kuma
@@ -76,7 +75,7 @@ metadata:
   name: uptime-kuma
   namespace: monitoring
 spec:
-  # ingressClassName: "traefik"
+  ingressClassName: "nginx"
   rules:
     - host: "uptime-kuma.${SECRET_CLUSTER_DOMAIN}"
       http:

cluster/apps/networking/authelia/helm-release.yaml

@@ -27,8 +27,7 @@ spec:
 
     ingress:
       enabled: true
-      annotations:
+      # annotations:
-        kubernetes.io/ingress.class: "nginx"
         # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
       subdomain: login
 
@@ -159,3 +158,14 @@ spec:
         key: SMTP_PASSWORD
         value: "${SECRET_AUTHELIA_SMTP_PASSWORD}"
         filename: SMTP_PASSWORD
+
+  postRenderers:
+    - kustomize:
+        patchesJson6902:
+          - target:
+              kind: Ingress
+              name: authelia
+            patch:
+              - op: add
+                path: /spec/ingressClassName
+                value: nginx

cluster/apps/networking/authentik/helm-release.yaml

@@ -23,9 +23,8 @@ spec:
 
     ingress:
       enabled: true
-      # ingressClassName: "traefik"
+      ingressClassName: "nginx"
-      annotations:
+      # annotations:
-        kubernetes.io/ingress.class: "nginx"
         # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
       hosts:
         - host: "id.${SECRET_CLUSTER_DOMAIN}"

cluster/apps/networking/unifi/helm-release.yaml

@@ -38,9 +38,8 @@ spec:
     ingress:
       main:
         enabled: true
-        # ingressClassName: "traefik"
+        ingressClassName: "nginx"
-        annotations:
+        # annotations:
-          kubernetes.io/ingress.class: "nginx"
           # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
           # traefik.ingress.kubernetes.io/router.middlewares: networking-buffering-medium@kubernetescrd
         hosts:

cluster/core/rook-ceph/dashboard/ingress.yaml

@@ -4,14 +4,13 @@ kind: Ingress
 metadata:
   name: rook-ceph-mgr-dashboard
   namespace: rook-ceph
-  annotations:
+  # annotations:
-    kubernetes.io/ingress.class: "nginx"
     # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
   labels:
     app.kubernetes.io/instance: rook-ceph-mgr-dashboard
     app.kubernetes.io/name: rook-ceph-mgr-dashboard
 spec:
-  # ingressClassName: "traefik"
+  ingressClassName: "nginx"
   rules:
     - host: "rook.${SECRET_CLUSTER_DOMAIN}"
       http: