Nick.Rosenloecher/ApiCore
1
0 Fork 0
Code Issues 22 Pull Requests Actions 3 Packages Projects Releases Wiki Activity

fix(k8s): Traefik-Middleware cloudflare-only an Ingress-Manifesten
Frontend Image / build-and-push (push) Canceled after 0s
Details
Backend Image / build-and-push (push) Canceled after 0s
Details

Browse Source 
Die live gesetzte Annotation traefik.ingress.kubernetes.io/router.middlewares
fehlte in den Manifesten (Backend und Frontend). Sie schuetzt vor
Direktzugriff am Origin vorbei, nicht vor fremden Cloudflare-Zonen.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
This commit is contained in:
Nick SzaunigandClaude Opus 5.5 committed 2026-10-12 11:23:46 +02:00
1 parent d9670dcda5
commit e53e4fb1cf
2 files changed
+8
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

deploy/k8s/backend/ingress.yaml
+4
View File
@@ -6,6 +6,10 @@ metadata:
# Requires cert-manager with a ClusterIssuer named "letsencrypt-prod"
# (or swap for whatever issuer/cert mechanism the cluster already uses).
cert-manager.io/cluster-issuer: letsencrypt-prod
# Nur Traffic ueber Cloudflare zulassen. Die Middleware liegt im Repo
# rke2-cluster (security/cloudflare-only-middlewares.yaml). Sie schuetzt vor
# Direktzugriff am Origin vorbei, nicht vor fremden Cloudflare-Zonen.
traefik.ingress.kubernetes.io/router.middlewares: apicore-cloudflare-only@kubernetescrd
spec:
ingressClassName: nginx
tls: