onyx-dev_pods/traefik/traefik.yaml

56 lines
1.8 KiB
YAML

---
apiVersion: v1
kind: Pod
metadata:
annotations:
io.kubernetes.cri-o.TTY/traefik: "false"
io.podman.annotations.autoremove/traefik: "FALSE"
io.podman.annotations.init/traefik: "FALSE"
io.podman.annotations.label/traefik: type:container_runtime_t
io.podman.annotations.privileged/traefik: "FALSE"
io.podman.annotations.publish-all/traefik: "FALSE"
creationTimestamp: "2022-12-03T15:45:41Z"
labels:
app: traefik-pod
name: traefik-pod
spec:
hostNetwork: true
containers:
- args:
- --entrypoints.web.address=:80
- --entrypoints.web.http.redirections.entryPoint.to=websecure
- --entrypoints.web.http.redirections.entryPoint.scheme=https
- --entrypoints.websecure.address=:443
- --entrypoints.mqtt.address=:1883
- --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
- --certificatesresolvers.myresolver.acme.storage=/acme.json
- --certificatesresolvers.myresolver.acme.tlschallenge=true
- --certificatesresolvers.myresolver.acme.httpChallenge.entrypoint=web
- --providers.file.directory=/configuration/
- --providers.file.watch=true
- --accesslog=true
#- --log.level=DEBUG
#- --api.dashboard=true
#- --api.insecure=true
image: docker.io/library/traefik:latest
name: traefik
securityContext:
capabilities:
drop:
- CAP_MKNOD
- CAP_AUDIT_WRITE
volumeMounts:
- mountPath: /configuration/
name: home-containers-onyx-dev_pods-traefik-configuration-host-0
- mountPath: /acme.json
name: data-traefik-acme.json-host-2
volumes:
- hostPath:
path: /home/containers/onyx-dev_pods/traefik/configuration
type: Directory
name: home-containers-onyx-dev_pods-traefik-configuration-host-0
- hostPath:
path: /data/traefik/acme.json
type: File
name: data-traefik-acme.json-host-2