Add ingresses

manifests/cert-manager.yaml

@@ -37,3 +37,20 @@ spec:
   commonName: "*.thelab.ms"
   dnsNames:
     - "*.thelab.ms"
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: apps-wildcard
+  namespace: default
+spec:
+  secretName: apps-wildcard-cert
+  issuerRef:
+    name: letsencrypt-prod
+    kind: Issuer
+    group: cert-manager.io
+  commonName: "*.apps.thelab.ms"
+  dnsNames:
+    - "*.apps.thelab.ms"

manifests/docuseal.yaml

@@ -48,3 +48,26 @@ spec:
       protocol: TCP
       port: 80
       targetPort: 3000
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: docuseal
+spec:
+  virtualhost:
+    fqdn: docuseal.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: docuseal
+          port: 80

manifests/frigate.yaml

@@ -136,3 +136,26 @@ spec:
             secretKeyRef:
               name: reporting-psql
               key: password
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: frigate
+spec:
+  virtualhost:
+    fqdn: frigate.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: frigate
+          port: 80

manifests/grafana.yaml

@@ -65,3 +65,26 @@ spec:
       protocol: TCP
       port: 80
       targetPort: 8880
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: grafana
+spec:
+  virtualhost:
+    fqdn: grafana.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: grafana
+          port: 80

manifests/homeassistant.yaml

@@ -63,3 +63,26 @@ spec:
       protocol: TCP
       port: 80
       targetPort: 8123
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: homeassistant
+spec:
+  virtualhost:
+    fqdn: homeassistant.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: homeassistant
+          port: 80

manifests/keycloak.yaml

@@ -157,3 +157,26 @@ spec:
           - name: mountpoint-dir
             mountPath: /var/lib/kubelet/pods
             mountPropagation: "Bidirectional"
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: keycloak
+spec:
+  virtualhost:
+    fqdn: keycloak.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: keycloak
+          port: 80

manifests/profile.yaml

@@ -162,3 +162,26 @@ spec:
       protocol: TCP
       port: 8888
       targetPort: 8888
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: profile
+spec:
+  virtualhost:
+    fqdn: profile.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: profile
+          port: 80

manifests/wikijs.yaml

@@ -57,3 +57,26 @@ spec:
       protocol: TCP
       port: 80
       targetPort: 3000
+
+---
+
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: wikijs
+spec:
+  virtualhost:
+    fqdn: wikijs.apps.thelab.ms
+    rateLimitPolicy:
+      local:
+        requests: 50
+        unit: second
+        burst: 50
+    tls:
+      secretName: apps-wildcard-cert
+  routes:
+    - conditions:
+      - prefix: /
+      services:
+        - name: wikijs
+          port: 80