feat: migrate ingresses to traefik

cluster/apps/home-automation/emqx/helm-release.yaml

@@ -30,13 +30,11 @@ spec:
       dashboard:
         enabled: true
         annotations:
-          kubernetes.io/ingress.class: "nginx"
+          kubernetes.io/ingress.class: "traefik"
+          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         path: /
         hosts:
           - emqx.${SECRET_CLUSTER_DOMAIN}
-        tls:
-          - hosts:
-              - emqx.${SECRET_CLUSTER_DOMAIN}
     emqxConfig:
       EMQX_ALLOW_ANONYMOUS: "false"
       EMQX_ADMIN_PASSWORD: "${SECRET_EMQX_ADMIN_PASSWORD}"

cluster/apps/home-automation/frigate/helm-release.yaml

@@ -24,17 +24,14 @@ spec:
       main:
         enabled: true
         annotations:
-          kubernetes.io/ingress.class: "nginx"
-          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local./api/verify"
-          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
+          kubernetes.io/ingress.class: "traefik"
+          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
         hosts:
           - host: "frigate.${SECRET_CLUSTER_DOMAIN}"
             paths:
               - path: /
                 pathType: Prefix
-        tls:
-          - hosts:
-              - "frigate.${SECRET_CLUSTER_DOMAIN}"
     service:
       main:
         annotations:

cluster/apps/home-automation/home-assistant/helm-release.yaml

@@ -44,8 +44,9 @@ spec:
     ingress:
       main:
         enabled: true
+        ingressClassName: "traefik"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
+          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: hass.${SECRET_CLUSTER_DOMAIN}
             paths:
@@ -55,9 +56,6 @@ spec:
             paths:
               - path: /
                 pathType: Prefix
-        tls:
-          - hosts:
-              - "home-assistant.${SECRET_CLUSTER_DOMAIN}"
     prometheus:
       serviceMonitor:
         enabled: false
@@ -88,18 +86,14 @@ spec:
           - "/config/.vscode"
         ingress:
           enabled: true
+          ingressClassName: "traefik"
           annotations:
-            kubernetes.io/ingress.class: "nginx"
-            nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local./api/verify"
-            nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
+            traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
           hosts:
             - host: hass-config.${SECRET_CLUSTER_DOMAIN}
               paths:
                 - path: /
                   pathType: Prefix
-          tls:
-            - hosts:
-                - hass-config.${SECRET_CLUSTER_DOMAIN}
         volumeMounts:
           - name: config
             mountPath: /config

cluster/apps/home-automation/zigbee2mqtt/helm-release.yaml

@@ -69,18 +69,15 @@ spec:
     ingress:
       main:
         enabled: true
+        ingressClassName: "traefik"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
-          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local./api/verify"
-          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
+          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
         hosts:
           - host: "zigbee.${SECRET_CLUSTER_DOMAIN}"
             paths:
               - path: /
                 pathType: Prefix
-        tls:
-          - hosts:
-              - "zigbee.${SECRET_CLUSTER_DOMAIN}"
     persistence:
       config:
         enabled: true
@@ -96,8 +93,4 @@ spec:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
             - matchExpressions:
-                - {
-                    key: "feature.node.kubernetes.io/custom-zigbee",
-                    operator: In,
-                    values: ["true"],
-                  }
+                - { key: "feature.node.kubernetes.io/custom-zigbee", operator: In, values: ["true"] }

cluster/apps/home-automation/zwavejs2mqtt/helm-release.yaml

@@ -28,10 +28,10 @@ spec:
     ingress:
       main:
         enabled: true
+        ingressClassName: "traefik"
         annotations:
-          kubernetes.io/ingress.class: "nginx"
-          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local./api/verify"
-          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}/"
+          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
         hosts:
           - host: zwave.${SECRET_CLUSTER_DOMAIN}
             paths:
@@ -60,8 +60,4 @@ spec:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
             - matchExpressions:
-                - {
-                    key: "feature.node.kubernetes.io/custom-zwave",
-                    operator: In,
-                    values: ["true"],
-                  }
+                - { key: "feature.node.kubernetes.io/custom-zwave", operator: In, values: ["true"] }