app-files/apps.yaml

@@ -29,7 +29,7 @@ spec:
   sources:
     - chart: woodpecker
       repoURL: oci://ghcr.io/woodpecker-ci/helm
-      targetRevision: 2.0.3
+      targetRevision: 2.0.2
       helm:
         releaseName: woodpecker
         valueFiles:

traefik-certmanager/base/kustomization.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - traefik-certmanager.yaml

traefik-certmanager/base/traefik-certmanager.yaml

@@ -1,66 +0,0 @@
-# from https://github.com/ncsa/traefik-certmanager
-#
-# Used to automatically create cert request for IngressRoute Objects
-#
-# Added by Aaron
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: traefik-certmanager
-  namespace: traefik
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: traefik-certmanager
-rules:
-- apiGroups: ["traefik.io"]
-  resources: ["ingressroutes"]
-  verbs: ["watch", "patch"]
-- apiGroups: ["cert-manager.io"]
-  resources: ["certificates"]
-  verbs: ["get", "create", "delete"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: traefik-certmanager
-subjects:
-- kind: ServiceAccount
-  name: traefik-certmanager
-  namespace: traefik
-roleRef:
-  kind: ClusterRole
-  name: traefik-certmanager
-  apiGroup: rbac.authorization.k8s.io
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: traefik-certmanager
-  namespace: traefik
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: traefik-certmanager
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: traefik-certmanager
-    spec:
-      serviceAccount: traefik-certmanager
-      containers:
-      - name: traefik-certmanager
-        image: git.ar21.de/yolokube/traefik-certmanager:latest
-        imagePullPolicy: Always
-        env:
-        - name: ISSUER_NAME
-          value: letsencrypt-prod
-        - name: ISSUER_KIND
-          value: ClusterIssuer
-        - name: CERT_CLEANUP
-          value: "true"
-        - name: PATCH_SECRETNAME
-          value: "true"

traefik-certmanager/overlay/kustomization.yaml

@@ -1,9 +0,0 @@
----
-resources:
-- ../base
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-images:
-- name: git.ar21.de/yolokube/traefik-certmanager
-  newName: git.ar21.de/yolokube/traefik-certmanager
-  newTag: "1"

traefik/dashboard-cert.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: traefik-cert
+  namespace: traefik
+spec:
+  secretName: traefik-tls-key
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - traefik.services.yolokube.de

woodpecker/grpc-ingress/ingress.yaml

@@ -16,20 +16,28 @@ spec:
       port: 9000
       targetPort: grpc
 ---
-apiVersion: traefik.io/v1alpha1
+apiVersion: networking.k8s.io/v1
-kind: IngressRoute
+kind: Ingress
 metadata:
-  namespace: woodpecker
+  annotations:
+    kubernetes.io/tls-acme: "true"
+    traefik.ingress.kubernetes.io/loadbalancer.server.scheme: h2c
+    traefik.ingress.kubernetes.io/service.serversscheme: h2c
   name: woodpecker-grpc
+  namespace: woodpecker
 spec:
-  entryPoints:
+  rules:
-    - websecure
+    - host: "woodpecker-grpc.apps.yolokube.de"
-  routes:
+      http:
-    - kind: Rule
+        paths:
-      match: Host(`woodpecker-grpc.apps.yolokube.de`) && Header(`Content-Type`, `application/grpc`)
+          - pathType: Prefix
-      services:
+            path: "/"
-        - name: woodpecker-grpc
+            backend:
-          port: grpc
+              service:
-          scheme: h2c
+                name: woodpecker-grpc
+                port:
+                  name: grpc
   tls:
-    secretName: woodpecker-grpc-tls-key
+    - hosts:
+        - woodpecker-grpc.apps.yolokube.de
+      secretName: woodpecker-grpc-tls-key