inventory: k6 tls

traefik/application-extras.yml

@@ -1,26 +1,4 @@
 ---
-apiVersion: v1
-kind: Service
-metadata:
-  name: traefik-metrics
-  namespace: traefik
-spec:
-  selector:
-    app.kubernetes.io/instance: k6-traefik
-    app.kubernetes.io/name: traefik
-  ports:
-    - protocol: TCP
-      port: 9100
-      targetPort: 9100
----
-apiVersion: codemowers.cloud/v1beta1
-kind: OIDCMiddlewareClient
-metadata:
-  name: dashboard
-spec:
-  displayName: Traefik dashboard
-  uri: 'https://traefik.k-space.ee'
----
 apiVersion: traefik.io/v1alpha1
 kind: TLSStore
 metadata:
@@ -48,6 +26,41 @@ spec:
   revisionHistoryLimit: 1
 ---
 apiVersion: traefik.io/v1alpha1
+kind: TLSStore
+metadata:
+  name: k6store
+spec:
+  defaultCertificate:
+    secretName: k6-tls
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: k6-tls
+  namespace: traefik
+spec:
+  dnsNames:
+    - 'k6.ee'
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: default
+  secretName: k6-tls
+  usages:
+    - digital signature
+    - key encipherment
+  revisionHistoryLimit: 1
+---
+
+apiVersion: codemowers.cloud/v1beta1
+kind: OIDCMiddlewareClient
+metadata:
+  name: dashboard
+spec:
+  displayName: Traefik dashboard
+  uri: 'https://traefik.k-space.ee'
+---
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: dashboard-redirect
@@ -57,6 +70,21 @@ spec:
     replacement: https://traefik.k-space.ee/dashboard/
     permanent: false
 ---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-metrics
+  namespace: traefik
+spec:
+  selector:
+    app.kubernetes.io/instance: k6-traefik
+    app.kubernetes.io/name: traefik
+  ports:
+    - protocol: TCP
+      port: 9100
+      targetPort: 9100
+---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata: