Reduce maintenance

templates/2.2/traefik-cm.yml.j2

@@ -1,48 +0,0 @@
-apiVersion: v1
-data:
-  traefik.yaml: |
-    global:
-      checkNewVersion: true
-    serversTransport:
-      insecureSkipVerify: true
-    entryPoints:
-{% for traefik_entrypoint in traefik_entrypoints %}
-      {{ traefik_entrypoint.name }}:
-        address: :{{ traefik_entrypoint.port }}
-{% endfor %}
-    providers:
-      kubernetesCRD:
-        ingressClass: "traefik"
-        throttleDuration: 2s
-      kubernetesIngress:
-        ingressClass: "traefik"
-    metrics:
-      prometheus:
-        buckets:
-        - 0.1
-        - 0.3
-        - 1.2
-        - 5
-        entryPoint: traefik
-    ping:
-      entryPoint: traefik
-    api:
-      insecure: true
-      dashboard: true
-      debug: true
-    log:
-      level: DEBUG
-    accessLog:
-      format: json
-      fields:
-        names:
-          BackendAddr: keep
-          BackendName: keep
-          BackendURL: keep
-          FrontendName: keep
-kind: ConfigMap
-metadata:
-  labels:
-    app: traefik
-  name: traefik
-  namespace: {{ traefik_namespace }}

templates/2.2/traefik-dashboard-insecure.yml.j2

@@ -1,39 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
-metadata:
-  name: traefik-dashboard-insecure
-  namespace: {{ traefik_namespace }}
-  labels:
-    app: traefik
-
-spec:
-  entryPoints:
-    - http
-  routes:
-  # Match is the rule corresponding to an underlying router.
-  # Later on, match could be the simple form of a path prefix, e.g. just "/bar",
-  # but for now we only support a traefik style matching rule.
-  - match: Host(`traefik.{{ traefik_domain }}`)
-    # kind could eventually be one of "Rule", "Path", "Host", "Method", "Header",
-    # "Parameter", etc, to support simpler forms of rule matching, but for now we
-    # only support "Rule".
-    kind: Rule
-    # (optional) Priority disambiguates rules of the same length, for route matching.
-    priority: 12
-    middlewares:
-{% if ingress_whitelist is defined %}
-      - name: traefik-ipwhitelist
-{% endif %}
-      - name: https-only
-    services:
-    - name: traefik-dashboard
-      port: 8080
-      # (default 1) A weight used by the weighted round-robin strategy (WRR).  
-      weight: 1
-      # (default true) PassHostHeader controls whether to leave the request's Host
-      # Header as it was before it reached the proxy, or whether to let the proxy set it
-      # to the destination (backend) host.
-      passHostHeader: true
-      responseForwarding:
-        # (default 100ms) Interval between flushes of the buffered response body to the client.
-        flushInterval: 100ms

templates/2.2/traefik-dashboard-svc.yml.j2

@@ -1,24 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app: traefik
-  name: traefik-dashboard
-  namespace: {{ traefik_namespace }}
-
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: 80
-  - name: traefik
-    port: 8080
-    protocol: TCP
-  - protocol: TCP
-    port: 443
-    name: https
-    targetPort: 443
-  type: ClusterIP
-  selector:
-    app: traefik

templates/2.2/traefik-dashboard.yml.j2

@@ -1,50 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
-metadata:
-  name: traefik-dashboard
-  namespace: {{ traefik_namespace }}
-  labels:
-    app: traefik
-
-spec:
-  entryPoints:
-    - https
-  routes:
-  # Match is the rule corresponding to an underlying router.
-  # Later on, match could be the simple form of a path prefix, e.g. just "/bar",
-  # but for now we only support a traefik style matching rule.
-  - match: Host(`traefik.{{ traefik_domain }}`)
-    # kind could eventually be one of "Rule", "Path", "Host", "Method", "Header",
-    # "Parameter", etc, to support simpler forms of rule matching, but for now we
-    # only support "Rule".
-    kind: Rule
-    # (optional) Priority disambiguates rules of the same length, for route matching.
-    priority: 12
-{% if basic_auth is defined or ingress_whitelist is defined %}
-    middlewares:
-{% if ingress_whitelist is defined %}
-      - name: traefik-ipwhitelist
-{% endif %}
-{% if basic_auth is defined %}
-      - name: basic-auth
-{% endif %}
-{% endif %}
-    services:
-    - name: traefik-dashboard
-      port: 8080
-      # (default 1) A weight used by the weighted round-robin strategy (WRR).  
-      weight: 1
-      # (default true) PassHostHeader controls whether to leave the request's Host
-      # Header as it was before it reached the proxy, or whether to let the proxy set it
-      # to the destination (backend) host.
-      passHostHeader: true
-      responseForwarding:
-        # (default 100ms) Interval between flushes of the buffered response body to the client.
-        flushInterval: 100ms
-  tls:
-    store:
-      name: default
-      namespace: {{ traefik_namespace }}
-    options:
-      name: default
-      namespace: {{ traefik_namespace }}

templates/2.2/traefik-dp.yml.j2

@@ -1,94 +0,0 @@
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  namespace: {{ traefik_namespace }}
-  name: traefik
-  labels:
-    app: traefik
-
-spec:
-  replicas: {% if traefik_node_selector is defined %}{{ traefik_node_selector|length }}{% else %}1{% endif %} 
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app: traefik
-  template:
-    metadata:
-      labels:
-        app: traefik
-    spec:
-      serviceAccountName: traefik-ingress-controller
-      containers:
-        - name: traefik
-          image: traefik:{{ traefik_version_2_2 }}
-          args:
-            - --configfile=/config/traefik.yaml
-#          imagePullPolicy: IfNotPresent
-          ports:
-            - name: http
-              containerPort: 80
-              protocol: TCP
-              hostPort: 80
-            - name: https
-              containerPort: 443
-              protocol: TCP
-              hostPort: 443
-            - name: traefik
-              containerPort: 8080
-              protocol: TCP
-              hostPort: 8080
-          readinessProbe:
-            httpGet:
-              path: /ping
-              port: traefik
-            failureThreshold: 1
-            initialDelaySeconds: 10
-            periodSeconds: 10
-            successThreshold: 1
-            timeoutSeconds: 2
-          livenessProbe:
-            httpGet:
-              path: /ping
-              port: traefik
-            failureThreshold: 3
-            initialDelaySeconds: 10
-            periodSeconds: 10
-            successThreshold: 1
-            timeoutSeconds: 2
-          securityContext:
-            capabilities:
-              drop:
-                - ALL
-              add:
-                - NET_BIND_SERVICE
-          resources:
-            limits:
-              cpu: {{ traefik_cpu_limit }}
-              memory: {{ traefik_memory_limit }}
-            requests:
-              cpu: 100m
-              memory: 20Mi
-          volumeMounts:
-            - mountPath: /config
-              name: config
-{% if traefik_node_selector is defined %}
-      nodeSelector:
-        flaminem.com/entrypoint: traefik
-{% endif %}
-      dnsPolicy: ClusterFirst
-{% if my_context == "flamykube" %}
-      hostNetwork: true
-{% else %}
-      hostNetwork: false
-{% endif %}
-      restartPolicy: Always
-      terminationGracePeriodSeconds: 1
-      tolerations:
-        - effect: NoSchedule
-          operator: Exists
-      volumes:
-        - configMap:
-            defaultMode: 420
-            name: traefik
-          name: config

templates/2.2/traefik-middleware-basicauth.yml.j2

@@ -1,8 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: basic-auth
-  namespace: {{ traefik_namespace }}
-spec:
-  basicAuth:
-    secret: basic-auth

templates/2.2/traefik-middleware-headers.yml.j2

@@ -1,31 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: security-headers
-  namespace: {{ traefik_namespace }}
-spec:
-  headers:
-    browserXssFilter: "true"
-    contentTypeNosniff: "true"
-    forceSTSHeader: "true"
-    frameDeny = "true"
-    stsIncludeSubdomains: "true"
-    stsPreload: "true"
-    stsSeconds: "15768000"
-    sslRedirect: "true"
-    contentSecurityPolicy = "default-src 'self' 'unsafe-inline'"
-    customFrameOptionsValue: "SAMEORIGIN"
-    referrerPolicy = "same-origin"
-    featurePolicy = "vibrate 'self'"
-
-    # CORS
-    accessControlAllowMethods:
-      - "GET"
-      - "OPTIONS"
-      - "PUT"
-    accessControlAllowOrigin = "origin-list-or-null"
-#    accessControlAllowOriginList:
-#      - "https://foo.bar.org"
-#      - "https://example.org"
-    accessControlMaxAge: 100
-    addVaryHeader: "true"

templates/2.2/traefik-middleware-httpsredirect.yml.j2

@@ -1,8 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: https-only
-  namespace: {{ traefik_namespace }}
-spec:
-  redirectScheme:
-    scheme: https

templates/2.2/traefik-ping.yml.j2

@@ -1,39 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
-metadata:
-  name: traefik-ping
-  namespace: {{ traefik_namespace }}
-  labels:
-    app: traefik
-
-spec:
-  entryPoints:
-    - https
-  routes:
-  # Match is the rule corresponding to an underlying router.
-  # Later on, match could be the simple form of a path prefix, e.g. just "/bar",
-  # but for now we only support a traefik style matching rule.
-  - match: Host(`traefik.{{ traefik_domain }}`) && PathPrefix(`/ping`)
-    # kind could eventually be one of "Rule", "Path", "Host", "Method", "Header",
-    # "Parameter", etc, to support simpler forms of rule matching, but for now we
-    # only support "Rule".
-    kind: Rule
-    # (optional) Priority disambiguates rules of the same length, for route matching.
-    priority: 14
-    services:
-    - name: traefik-dashboard
-      port: 8080
-      # (default 1) A weight used by the weighted round-robin strategy (WRR).  
-      weight: 1
-      # (default true) PassHostHeader controls whether to leave the request's Host
-      # Header as it was before it reached the proxy, or whether to let the proxy set it
-      # to the destination (backend) host.
-      passHostHeader: true
-      responseForwarding:
-        # (default 100ms) Interval between flushes of the buffered response body to the client.
-        flushInterval: 100ms
-  tls:
-    secretName: wildcard-cluster
-    options:
-      name: default
-      namespace: {{ traefik_namespace }}

templates/2.2/traefik-sa.yml.j2

@@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  namespace: {{ traefik_namespace }}
-  name: traefik-ingress-controller

templates/2.2/traefik-svc.yml.j2

@@ -1,21 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app: traefik
-  name: traefik
-  namespace: {{ traefik_namespace }}
-
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: 80
-  - protocol: TCP
-    port: 443
-    name: https
-    targetPort: 443
-  type: LoadBalancer
-  selector:
-    app: traefik

templates/2.2/traefik-tls-options.yml.j2

@@ -1,16 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: TLSOption
-metadata:
-  name: default
-  namespace: {{ traefik_namespace }}
-
-spec:
-  sniStrict: true
-  minVersion: VersionTLS12
-  cipherSuites:
-    - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
-    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
-  curvePreferences:
-    - CurveP521
-    - CurveP384