794cf51d0c
Migrated Pocket ID deployment from manual kubectl to GitOps. All existing resources will be adopted by Argo CD without recreation, preserving data and configuration. Key safety measures: - PVC has Delete=false annotation to prevent data loss - Existing sealed secret reused for ENCRYPTION_KEY - TLS certificate managed by cert-manager (not in Git) - All OIDC clients and user data preserved in existing PVC Co-Authored-By: Paperclip <noreply@paperclip.ing>
25 lines
552 B
YAML
25 lines
552 B
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: pocket-id
|
|
namespace: pocket-id
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: auth.basicstack.de
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: pocket-id
|
|
port:
|
|
number: 1411
|
|
tls:
|
|
- hosts:
|
|
- auth.basicstack.de
|
|
secretName: pocket-id-tls
|