added https to traefik-internal

charts/dashboards/templates/glance-ingressroute.yaml

@@ -13,3 +13,20 @@ spec:
       services:
         - name: glance
           port: 8082
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: glance-tls
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`glance.{{ .Values.internalDomain }}`)
+      kind: Rule
+      services:
+        - name: glance
+          port: 8082
+  tls: {}

charts/dashboards/templates/homepage-ingressroute.yaml

@@ -13,3 +13,20 @@ spec:
       services:
         - name: homepage
           port: 3000
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: homepage-tls
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`homepage.{{ .Values.internalDomain }}`)
+      kind: Rule
+      services:
+        - name: homepage
+          port: 3000
+  tls: {}

charts/traefik-internal/templates/tls-store.yaml

@@ -0,0 +1,7 @@
+apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: default
+spec:
+  defaultCertificate:
+    secretName: {{ .Values.tlsSecretName }}

charts/traefik-internal/templates/traefik-internal.yaml

@@ -61,6 +61,7 @@ spec:
           image: {{ .Values.image }}
           args:
             - --entrypoints.web.address=:{{ .Values.port }}
+            - --entrypoints.websecure.address=:{{ .Values.httpsPort }}
             - --providers.kubernetescrd
             - --providers.kubernetescrd.ingressClass={{ .Values.ingressClass }}
             - --api.insecure=true
@@ -68,6 +69,8 @@ spec:
           ports:
             - name: web
               containerPort: {{ .Values.port }}
+            - name: websecure
+              containerPort: {{ .Values.httpsPort }}
             - name: dashboard
               containerPort: 8080
 ---
@@ -86,6 +89,9 @@ spec:
     - name: web
       port: {{ .Values.port }}
       targetPort: {{ .Values.port }}
+    - name: websecure
+      port: {{ .Values.httpsPort }}
+      targetPort: {{ .Values.httpsPort }}
     - name: dashboard
       port: 9095
       targetPort: 8080

charts/traefik-internal/values.yaml

@@ -1,4 +1,6 @@
 image: traefik:v3.3
 port: 80
+httpsPort: 443
 ingressClass: traefik-internal
 loadBalancerIP: "10.0.1.250"
+tlsSecretName: traefik-internal-tls