vault: keep ui api available

services/vault/ingress.yaml

@@ -26,75 +26,3 @@ spec:
                 name: vault
                 port:
                   number: 8200
-
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: vault-ui-discovery
-  namespace: vault
-  annotations:
-    kubernetes.io/ingress.class: traefik
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.middlewares: vault-vault-public-chain@kubernetescrd
-    traefik.ingress.kubernetes.io/router.priority: "120"
-    traefik.ingress.kubernetes.io/router.tls: "true"
-spec:
-  ingressClassName: traefik
-  tls:
-    - hosts: [secret.bstein.dev]
-      secretName: vault-server-tls
-  rules:
-    - host: secret.bstein.dev
-      http:
-        paths:
-          - path: /v1/sys/health
-            pathType: Exact
-            backend:
-              service:
-                name: vault
-                port:
-                  number: 8200
-          - path: /v1/sys/seal-status
-            pathType: Exact
-            backend:
-              service:
-                name: vault
-                port:
-                  number: 8200
-          - path: /v1/sys/internal/ui/mounts
-            pathType: Exact
-            backend:
-              service:
-                name: vault
-                port:
-                  number: 8200
-
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: vault-api
-  namespace: vault
-  annotations:
-    kubernetes.io/ingress.class: traefik
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.middlewares: vault-vault-api-chain@kubernetescrd
-    traefik.ingress.kubernetes.io/router.priority: "100"
-    traefik.ingress.kubernetes.io/router.tls: "true"
-spec:
-  ingressClassName: traefik
-  tls:
-    - hosts: [secret.bstein.dev]
-      secretName: vault-server-tls
-  rules:
-    - host: secret.bstein.dev
-      http:
-        paths:
-          - path: /v1
-            pathType: Prefix
-            backend:
-              service:
-                name: vault
-                port:
-                  number: 8200

services/vault/middleware.yaml

@@ -49,22 +49,6 @@ spec:
   inFlightReq:
     amount: 100
 
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: vault-api-forward-auth
-  namespace: vault
-spec:
-  forwardAuth:
-    address: http://oauth2-proxy.sso.svc.cluster.local/oauth2/auth
-    trustForwardHeader: true
-    authResponseHeaders:
-      - Authorization
-      - X-Auth-Request-Email
-      - X-Auth-Request-User
-      - X-Auth-Request-Groups
-
 ---
 apiVersion: traefik.io/v1alpha1
 kind: Middleware
@@ -78,18 +62,3 @@ spec:
       - name: vault-edge-inflight
       - name: vault-response-cleanup
       - name: vault-security-headers
-
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: vault-api-chain
-  namespace: vault
-spec:
-  chain:
-    middlewares:
-      - name: vault-edge-rate-limit
-      - name: vault-edge-inflight
-      - name: vault-api-forward-auth
-      - name: vault-response-cleanup
-      - name: vault-security-headers