adrien/ansible-role-k8s-traefik
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Traefik 2.3 et PSP fonctionnent #1

Merged
adrien merged 3 commits from WIP into master 2020-11-03 23:33:05 +00:00
Conversation 0 Commits 3 Files changed 11 +5 -8
3 changed files with 5 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 68588b80ac - Show all commits

2
defaults/main.yml
View file

@ -13,7 +13,7 @@ traefik_memory_limit: 300Mi
traefik_entrypoints: traefik_entrypoints:
- { name: "http", port: 8000, proto: "TCP", hostport: 80 } - { name: "http", port: 8000, proto: "TCP", hostport: 80 }
- { name: "https", port: 4443, proto: "TCP", hostport: 443, tls: true } - { name: "https", port: 4443, proto: "TCP", hostport: 443, tls: true }
# - { name: "traefik", port: 8080, proto: "TCP" } - { name: "traefik", port: 8080, proto: "TCP" }
basic_auth: false basic_auth: false
#traefik_dashboard_certificate: wildcard-cluster #traefik_dashboard_certificate: wildcard-cluster

3
templates/traefik-ingressroute.yml.j2
View file

@ -13,8 +13,7 @@ spec:
# Match is the rule corresponding to an underlying router. # Match is the rule corresponding to an underlying router.
# Later on, match could be the simple form of a path prefix, e.g. just "/bar", # Later on, match could be the simple form of a path prefix, e.g. just "/bar",
# but for now we only support a traefik style matching rule. # but for now we only support a traefik style matching rule.
# - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) - match: Host(`traefik.{{ traefik_domain }}`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
- match: Host(`traefik.{{ traefik_domain }}`)
# kind could eventually be one of "Rule", "Path", "Host", "Method", "Header", # kind could eventually be one of "Rule", "Path", "Host", "Method", "Header",
# "Parameter", etc, to support simpler forms of rule matching, but for now we # "Parameter", etc, to support simpler forms of rule matching, but for now we
# only support "Rule". # only support "Rule".

2
templates/traefik-psp.yml.j2
View file

@ -39,8 +39,6 @@ spec:
- min: 1 - min: 1
max: 65535 max: 65535
hostPorts: hostPorts:
- max: 65535
min: 1
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
seLinux: seLinux:
rule: 'RunAsAny' rule: 'RunAsAny'