First commit

manifest/01-traefik/traefik.yml

@@ -0,0 +1,38 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChartConfig
+metadata:
+  name: traefik
+  namespace: kube-system
+spec:
+  valuesContent: |-
+    service:
+      annotations:
+        metallb.universe.tf/loadBalancerIPs: 192.168.4.1
+      spec:
+        externalTrafficPolicy: Local
+    additionalArguments:
+      - "--providers.kubernetesingress.allowexternalnameservices"
+      - "--providers.kubernetescrd.allowexternalnameservices"
+
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  namespace: default
+  name: allow-local-only
+spec:
+  ipWhiteList:
+    sourceRange:
+      - 127.0.0.1/32
+      - 192.168.0.0/16
+      - 10.0.0.0/8
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+  namespace: default
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true