Update traefik deployment

tasks/main.yml

@@ -89,8 +89,8 @@
           tag: "{{ traefik_version }}"
         additionalArguments:
           - --configFile=/etc/traefik/traefik.yaml
-        podSecurityPolicy:
+#        podSecurityPolicy:
-          enabled: true
+#          enabled: true
         service:
           enabled: false
         ingressRoute:

templates/traefik-files.yml.j2

@@ -16,10 +16,10 @@ data:
             burst: 50
         security_headers:
           headers:
-            accessControlAllowMethods: ["GET", "OPTIONS", "PUT"]
+    #        accessControlAllowMethods: ["GET", "OPTIONS", "PUT"]
-            accessControlAllowOrigin: "origin-list-or-null"
+    #        accessControlAllowOrigin: "origin-list-or-null"
-            accessControlMaxAge: 100
+    #        accessControlMaxAge: 100
-            addVaryHeader: true
+    #        addVaryHeader: true
             browserXssFilter: true
             contentTypeNosniff: true
             forceSTSHeader: true

templates/traefik-middleware-ipwhitelist.yml.j2

@@ -1,12 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: traefik-ipwhitelist
-spec:
-  ipWhiteList:
-    sourceRange:
-{% if ingress_whitelist is defined %}
-{% for acl_whitelist in ingress_whitelist %}
-      - {{ acl_whitelist }}
-{% endfor %}
-{% endif %}

todo.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+cat << 'EOF' | kubectl --context my_context  apply -f -
+---
+apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: traefik
+spec:
+  controller: traefik.io/ingress-controller
+EOF
+