manual configs added

config/argocd/argocd-cmd-params-cm.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cmd-params-cm
+  namespace: argocd
+  labels:
+    app.kubernetes.io/name: argocd-cmd-params-cm
+    app.kubernetes.io/part-of: argocd
+data:
+  server.insecure: "true"

config/argocd/ingress-route.yaml

@@ -0,0 +1,24 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: argocd-server
+  namespace: argocd
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`argocd.innovation-hub-niedersachsen.de`)
+      priority: 10
+      services:
+        - name: argocd-server
+          port: 80
+#    - kind: Rule
+#      match: Host(`argocd.innovation-hub-niedersachsen.de`) && Headers(`Content-Type`, `application/grpc`)
+#      priority: 11
+#      services:
+#        - name: argocd-server
+#          port: 80
+#          scheme: h2c
+  tls:
+    secretName: argocd-tls

config/cert-manager/cloudflare-api-token-secret.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cloudflare-api-token-secret
+type: Opaque
+stringData:
+  api-token: 8U6YVJlQe3UCkw6P2Xx0Qvmpy975EwK14FV8IMdp

config/dashboard/cluster-role.yaml

@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: admin-user
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: admin-user
+  namespace: kubernetes-dashboard
+

config/dashboard/dashboard-traefik.yaml

@@ -0,0 +1,32 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: dashboard-transport
+  namespace: kubernetes-dashboard
+spec:
+  serverName: dashboard-kong-proxy
+  insecureSkipVerify: true
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dashboard
+  namespace: kubernetes-dashboard
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`dashboard.innohub.local`)
+      kind: Rule
+      services:
+        - name: dashboard-kong-proxy
+          port: 443
+          scheme: https
+          serversTransport: dashboard-transport
+          namespace: kubernetes-dashboard
+  tls:
+    secretName: dashboard.innohub.local
+    domains:
+      - main: dashboard.innohub.local

config/dashboard/service-account.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: admin-user
+  namespace: kubernetes-dashboard

config/mattermost/https-redirect.yaml

@@ -0,0 +1,8 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: http-redirect
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true

config/open-webui/disable-token.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations:
+    kubernetes.io/automountServiceAccountToken: "false"
+  name: open-webui
+  namespace: open-webui

config/traefik/traefik-dashboard.yaml

@@ -0,0 +1,14 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-dashboard
+  namespace: kube-system
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`traefik.innohub.local`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService

config/wordpress/www-redirectScheme.yaml

@@ -0,0 +1,13 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-www
+  namespace: wordpress
+spec:
+  redirectRegex:
+    regex: "^https?://innovation-hub-niedersachsen.de/(.*)"
+    replacement: "https://www.innovation-hub-niedersachsen.de/$1"
+    permanent: true
+  redirectRegex:
+    regex: "^http?://innovation-hub-niedersachsen.de/(.*)"
+    replacement: "https://www.innovation-hub-niedersachsen.de/$1"