onyx_pods/traefik/traefik.yaml

66 lines
2.2 KiB
YAML

---
apiVersion: v1
kind: Pod
metadata:
annotations:
bind-mount-options:/data/traefik/acme.json: z
bind-mount-options:/home/containers/onyx_pods/traefik/configuration: z
bind-mount-options:/run/user/1000/podman/podman.sock: z
io.kubernetes.cri-o.TTY/traefik: "false"
io.podman.annotations.autoremove/traefik: "FALSE"
io.podman.annotations.init/traefik: "FALSE"
io.podman.annotations.label/traefik: type:container_runtime_t
io.podman.annotations.privileged/traefik: "FALSE"
io.podman.annotations.publish-all/traefik: "FALSE"
creationTimestamp: "2022-12-03T15:45:41Z"
labels:
app: traefik-pod
name: traefik-pod
spec:
hostNetwork: true
containers:
- args:
- --entrypoints.web.address=:80
- --entrypoints.web.http.redirections.entryPoint.to=websecure
- --entrypoints.web.http.redirections.entryPoint.scheme=https
- --entrypoints.websecure.address=:443
- --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
- --certificatesresolvers.myresolver.acme.storage=/acme.json
- --certificatesresolvers.myresolver.acme.tlschallenge=true
- --certificatesresolvers.myresolver.acme.httpChallenge.entrypoint=web
- --providers.file.directory=/configuration/
- --providers.file.watch=true
- --accesslog=true
#- --log.level=DEBUG
#- --api.dashboard=true
#- --api.insecure=true
image: docker.io/library/traefik:latest
name: traefik
securityContext:
capabilities:
drop:
- CAP_MKNOD
- CAP_AUDIT_WRITE
seLinuxOptions:
type: container_runtime_t
volumeMounts:
- mountPath: /configuration/
name: home-containers-onyx_pods-traefik-configuration-host-0
- mountPath: /var/run/docker.sock
name: run-user-1000-podman-podman.sock-host-1
- mountPath: /acme.json
name: data-traefik-acme.json-host-2
volumes:
- hostPath:
path: /home/containers/onyx_pods/traefik/configuration
type: Directory
name: home-containers-onyx_pods-traefik-configuration-host-0
- hostPath:
path: /run/user/1000/podman/podman.sock
type: File
name: run-user-1000-podman-podman.sock-host-1
- hostPath:
path: /data/traefik/acme.json
type: File
name: data-traefik-acme.json-host-2