helm-charts/charts/plane-ce/templates/ingress-traefik.yaml at 47851fe7c680aaf7ce5136be1a63f9f9ec2a16c9 · makeplane/helm-charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
{{- if and .Values.ingress.enabled (hasPrefix "traefik" .Values.ingress.ingressClass) .Values.ingress.appHost }}

apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: {{ .Release.Name }}-ingress
  labels:
    {{- include "plane.resourceLabels" $ | nindent 4 }}
  {{- with (include "plane.resourceAnnotations" $) }}
  annotations:
    {{- . | nindent 4 }}
  {{- end }}
  namespace: {{ .Release.Namespace }}
spec:
  entryPoints:
    - websecure

  routes:

  # IMPORTANT: specific paths FIRST

  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/spaces`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-space
        port: 3000

  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/god-mode`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-admin
        port: 3000

  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/api`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-api
        port: 8000

  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/auth`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-api
        port: 8000

  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/live`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-live
        port: 3000

  {{- if and .Values.minio.local_setup .Values.env.docstore_bucket }}
  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/{{ .Values.env.docstore_bucket }}`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-minio
        port: 9000
  {{- end }}

  # LAST: catch all
  - match: Host(`{{ .Values.ingress.appHost }}`) && PathPrefix(`/`)
    kind: Rule
    middlewares:
      - name: {{ .Release.Name }}-body-limit
    services:
      - name: {{ .Release.Name }}-web
        port: 3000

  tls:
    secretName: {{ default (printf "%s-ssl-cert" .Release.Name) .Values.ssl.tls_secret_name }}

{{- end }}

{{- if and .Values.ingress.enabled (hasPrefix "traefik" .Values.ingress.ingressClass) .Values.minio.local_setup .Values.ingress.minioHost }}
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: {{ .Release.Name }}-minio-ingress
  labels:
    {{- include "plane.resourceLabels" $ | nindent 4 }}
  {{- with (include "plane.resourceAnnotations" $) }}
  annotations:
    {{- . | nindent 4 }}
  {{- end }}
  namespace: {{ .Release.Namespace }}
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`{{ .Values.ingress.minioHost }}`)
      kind: Rule
      middlewares:
        - name: {{ .Release.Name }}-body-limit
      services:
        - name: {{ .Release.Name }}-minio
          port: 9090
  tls:
    secretName: {{ default (printf "%s-ssl-cert" .Release.Name) .Values.ssl.tls_secret_name }}
{{- end }}

{{- if and .Values.ingress.enabled (hasPrefix "traefik" .Values.ingress.ingressClass) .Values.rabbitmq.local_setup .Values.ingress.rabbitmqHost }}
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: {{ .Release.Name }}-rabbitmq-ingress
  labels:
    {{- include "plane.resourceLabels" $ | nindent 4 }}
  {{- with (include "plane.resourceAnnotations" $) }}
  annotations:
    {{- . | nindent 4 }}
  {{- end }}
  namespace: {{ .Release.Namespace }}
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`{{ .Values.ingress.rabbitmqHost }}`)
      kind: Rule
      middlewares:
        - name: {{ .Release.Name }}-body-limit
      services:
        - name: {{ .Release.Name }}-rabbitmq
          port: 15672
  tls:
    secretName: {{ default (printf "%s-ssl-cert" .Release.Name) .Values.ssl.tls_secret_name }}
{{- end }}