titan-iac/services/vault/ingress.yaml

28 lines
754 B
YAML

# services/vault/helmrelease.yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: vault
namespace: vault
annotations:
kubernetes.io/ingress.class: traefik
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/service.serversscheme: https
traefik.ingress.kubernetes.io/service.serversTransport: vault-vault-to-https@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts: [secret.bstein.dev]
secretName: vault-server-tls
rules:
- host: secret.bstein.dev
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: vault-ui
port:
number: 8200