add internal ingress

external/ingress.yaml

@@ -1,10 +1,10 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: traefik-internal-tls
+  name: traefik-external-tls
   namespace: kube-system
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik-external
 spec:
   entryPoints:
     - websecure
@@ -13,7 +13,7 @@ spec:
     domains:
     - main: "*.ducoterra.net"
   routes:
-  - match: Host(`traefik-internal.ducoterra.net`)
+  - match: Host(`traefik-external.ducoterra.net`)
     kind: Rule
     services:
     - name: traefik-external-admin
@@ -24,15 +24,15 @@ spec:
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: traefik-internal-web
+  name: traefik-external-web
   namespace: kube-system
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik-external
 spec:
   entryPoints:
     - web
   routes:
-  - match: Host(`traefik-internal.ducoterra.net`)
+  - match: Host(`traefik-external.ducoterra.net`)
     kind: Rule
     services:
     - name: traefik-external-admin

internal/ingress.yaml

@@ -0,0 +1,41 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-internal-tls
+  namespace: kube-system
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  tls:
+    certResolver: myresolver
+    domains:
+    - main: "*.ducoterra.net"
+  routes:
+  - match: Host(`traefik-internal.ducoterra.net`)
+    kind: Rule
+    services:
+    - name: traefik-external-admin
+      port: 8080
+
+---
+
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-internal-web
+  namespace: kube-system
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - web
+  routes:
+  - match: Host(`traefik-internal.ducoterra.net`)
+    kind: Rule
+    services:
+    - name: traefik-external-admin
+      port: 8080
+    middlewares:
+      - name: httpsredirect

internal/service.yaml

@@ -16,3 +16,17 @@ spec:
       port: 443
       name: websecure
       targetPort: 443
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-internal-admin
+  namespace: kube-system
+spec:
+  selector:
+    app: traefik-internal-controller
+  ports:
+    - protocol: TCP
+      port: 8080
+      name: admin
+      targetPort: 8080