traefik: isolate custom rbac from k3s cleanup

This commit is contained in:
Brad Stein 2026-04-06 01:57:34 -03:00
parent 801dde8242
commit 816d0cca65
5 changed files with 7 additions and 8 deletions

View File

@ -2,7 +2,7 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: traefik-ingress-controller name: atlas-traefik-ingress-controller
rules: rules:
- apiGroups: - apiGroups:
- "" - ""

View File

@ -2,12 +2,12 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: traefik-ingress-controller name: atlas-traefik-ingress-controller
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole
name: traefik-ingress-controller name: atlas-traefik-ingress-controller
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: traefik-ingress-controller name: atlas-traefik-ingress-controller
namespace: traefik namespace: traefik

View File

@ -72,8 +72,8 @@ items:
node-role.kubernetes.io/worker: "true" node-role.kubernetes.io/worker: "true"
restartPolicy: Always restartPolicy: Always
schedulerName: default-scheduler schedulerName: default-scheduler
serviceAccount: traefik-ingress-controller serviceAccount: atlas-traefik-ingress-controller
serviceAccountName: traefik-ingress-controller serviceAccountName: atlas-traefik-ingress-controller
terminationGracePeriodSeconds: 30 terminationGracePeriodSeconds: 30
kind: List kind: List
metadata: {} metadata: {}

View File

@ -2,5 +2,5 @@
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
name: traefik-ingress-controller name: atlas-traefik-ingress-controller
namespace: traefik namespace: traefik

View File

@ -41,7 +41,6 @@ spec:
ingress: ingress:
className: traefik className: traefik
annotations: annotations:
cert-manager.io/cluster-issuer: letsencrypt
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true" traefik.ingress.kubernetes.io/router.tls: "true"
hosts: hosts: