fix: migrate ingress classes S01E03

2026-01-27 10:18:27 +00:00 · 2023-11-29 06:08:53 +08:00
parent e956a32c9f
commit 95c91af572
34 changed files with 40 additions and 40 deletions
--- a/kube/deploy/apps/atuin/app/hr.yaml
+++ b/kube/deploy/apps/atuin/app/hr.yaml
@@ -38,7 +38,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/proxy-body-size: "100m"
          nginx.ingress.kubernetes.io/custom-http-errors: "400,403,405,409,410,411,412,413,414,415,416,417,418,421,425,431,451,500,501,502,503,504,505,506,510"
--- a/kube/deploy/apps/audiobookshelf/app/hr.yaml
+++ b/kube/deploy/apps/audiobookshelf/app/hr.yaml
@@ -47,7 +47,7 @@ spec:
      main:
        enabled: true
        primary: true
-        className: nginx
+        className: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_AUDIOBOOKSHELF}"
            paths:
--- a/kube/deploy/apps/cyberchef/app/hr.yaml
+++ b/kube/deploy/apps/cyberchef/app/hr.yaml
@@ -36,7 +36,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_CYBERCHEF}"
            paths:
--- a/kube/deploy/apps/elk/app/hr.yaml
+++ b/kube/deploy/apps/elk/app/hr.yaml
@@ -40,7 +40,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "elk.${DNS_SHORT}"
            paths:
--- a/kube/deploy/apps/excalidraw/app/hr.yaml
+++ b/kube/deploy/apps/excalidraw/app/hr.yaml
@@ -30,7 +30,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${IP_EC2_INGRESS}"
          nginx.ingress.kubernetes.io/auth-signin: |-
--- a/kube/deploy/apps/firefly/app/authentik.yaml
+++ b/kube/deploy/apps/firefly/app/authentik.yaml
@@ -5,7 +5,7 @@ metadata:
  name: firefly-authentik
  namespace: authentik
 spec:
-  ingressClassName: nginx
+  ingressClassName: "nginx-internal"
  rules:
    - host: &host "${APP_DNS_FIREFLY}"
      http:
--- a/kube/deploy/apps/firefly/app/hr.yaml
+++ b/kube/deploy/apps/firefly/app/hr.yaml
@@ -74,7 +74,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/auth-signin: |-
            https://${APP_DNS_FIREFLY}/outpost.goauthentik.io/start?rd=$escaped_request_uri
--- a/kube/deploy/apps/gokapi/app/hr.yaml
+++ b/kube/deploy/apps/gokapi/app/hr.yaml
@@ -30,7 +30,7 @@ spec:
    ingress:
      main:
        enabled: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: "${APP_DNS_GOKAPI}"
            paths:
--- a/kube/deploy/apps/grocy/app/authentik.yaml
+++ b/kube/deploy/apps/grocy/app/authentik.yaml
@@ -5,7 +5,7 @@ metadata:
  name: grocy-authentik
  namespace: authentik
 spec:
-  ingressClassName: nginx
+  ingressClassName: "nginx-internal"
  rules:
    - host: &host "${APP_DNS_GROCY}"
      http:
--- a/kube/deploy/apps/grocy/app/hr.yaml
+++ b/kube/deploy/apps/grocy/app/hr.yaml
@@ -85,7 +85,7 @@ spec:
      main:
        enabled: true
        primary: true
-        className: nginx
+        className: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/auth-signin: |-
            https://${APP_DNS_GROCY}/outpost.goauthentik.io/start?rd=$escaped_request_uri
--- a/kube/deploy/apps/joplin/app/hr.yaml
+++ b/kube/deploy/apps/joplin/app/hr.yaml
@@ -54,7 +54,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${DNS_SHORT_CF}"
          external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
--- a/kube/deploy/apps/kanidm/app/hr.yaml
+++ b/kube/deploy/apps/kanidm/app/hr.yaml
@@ -52,7 +52,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${DNS_SHORT_CF}"
          external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
--- a/kube/deploy/apps/libreddit/app/hr.yaml
+++ b/kube/deploy/apps/libreddit/app/hr.yaml
@@ -49,7 +49,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_LIBREDDIT}"
            paths:
--- a/kube/deploy/apps/livestream/oven/player/hr.yaml
+++ b/kube/deploy/apps/livestream/oven/player/hr.yaml
@@ -36,7 +36,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${DNS_SHORT_CF}"
          external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
--- a/kube/deploy/apps/miniflux/app/hr.yaml
+++ b/kube/deploy/apps/miniflux/app/hr.yaml
@@ -48,7 +48,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_MINIFLUX}"
            paths:
--- a/kube/deploy/apps/neko/xfce/hr.yaml
+++ b/kube/deploy/apps/neko/xfce/hr.yaml
@@ -61,7 +61,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_NEKO_XFCE}"
            paths:
--- a/kube/deploy/apps/nextcloud/app/hr.yaml
+++ b/kube/deploy/apps/nextcloud/app/hr.yaml
@@ -174,7 +174,7 @@ spec:
      main: &ingress
        enabled: true
        primary: false
-        className: nginx
+        className: "nginx-internal"
        hosts:
          - host: *host
            paths:
--- a/kube/deploy/apps/nfs-web/app/hr.yaml
+++ b/kube/deploy/apps/nfs-web/app/hr.yaml
@@ -50,7 +50,7 @@ spec:
      main:
        enabled: true
        primary: true
-        className: nginx
+        className: "nginx-internal"
        # annotations: # TODO
        #   external-dns.alpha.kubernetes.io/target: "${DNS_SHORT_HOME}"
        #   external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
--- a/kube/deploy/apps/ntfy/app/hr.yaml
+++ b/kube/deploy/apps/ntfy/app/hr.yaml
@@ -105,7 +105,7 @@ spec:
      main:
        enabled: true
        primary: true
-        className: "nginx"
+        className: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${IP_EC2_INGRESS}"
        hosts:
--- a/kube/deploy/apps/paperless-ngx/app/authentik.yaml
+++ b/kube/deploy/apps/paperless-ngx/app/authentik.yaml
@@ -5,7 +5,7 @@ metadata:
  name: paperless-ngx-authentik
  namespace: authentik
 spec:
-  ingressClassName: nginx
+  ingressClassName: "nginx-internal"
  rules:
    - host: &host "${APP_DNS_PAPERLESS_NGX}"
      http:
--- a/kube/deploy/apps/paperless-ngx/app/hr.yaml
+++ b/kube/deploy/apps/paperless-ngx/app/hr.yaml
@@ -96,7 +96,7 @@ spec:
      main:
        enabled: true
        primary: true
-        className: nginx
+        className: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/auth-signin: |-
            https://${APP_DNS_PAPERLESS_NGX}/outpost.goauthentik.io/start?rd=$escaped_request_uri
--- a/kube/deploy/apps/phanpy/app/hr.yaml
+++ b/kube/deploy/apps/phanpy/app/hr.yaml
@@ -37,7 +37,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "phanpy.${DNS_SHORT}"
            paths:
--- a/kube/deploy/apps/piped/app/hr.yaml
+++ b/kube/deploy/apps/piped/app/hr.yaml
@@ -83,7 +83,7 @@ spec:
          memory: 500Mi
    ingress:
      main:
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/enable-cors: "true"
          nginx.ingress.kubernetes.io/cors-allow-origin: "https://${APP_DNS_PIPED_FRONTEND}, https://${APP_DNS_PIPED_BACKEND}, https://${APP_DNS_PIPED_YTPROXY}"
@@ -95,7 +95,7 @@ spec:
          - hosts:
              - *frontend
      backend:
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/enable-cors: "true"
          nginx.ingress.kubernetes.io/cors-allow-origin: "https://${APP_DNS_PIPED_FRONTEND}, https://${APP_DNS_PIPED_BACKEND}, https://${APP_DNS_PIPED_YTPROXY}"
@@ -107,7 +107,7 @@ spec:
          - hosts:
              - *backend
      ytproxy:
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          nginx.ingress.kubernetes.io/enable-cors: "true"
          nginx.ingress.kubernetes.io/cors-allow-origin: "https://${APP_DNS_PIPED_FRONTEND}, https://${APP_DNS_PIPED_BACKEND}, https://${APP_DNS_PIPED_YTPROXY}"
--- a/kube/deploy/apps/psono/app/hr.yaml
+++ b/kube/deploy/apps/psono/app/hr.yaml
@@ -79,7 +79,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${APP_IP_NGINX}"
          nginx.ingress.kubernetes.io/use-regex: "true"
@@ -173,7 +173,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_PSONO}"
            paths:
@@ -276,7 +276,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_PSONO}"
            paths:
--- a/kube/deploy/apps/soft-serve/app/hr.yaml
+++ b/kube/deploy/apps/soft-serve/app/hr.yaml
@@ -74,7 +74,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_SOFT_SERVE_HTTPS}"
            paths:
--- a/kube/deploy/apps/syncthing/user1/hr.yaml
+++ b/kube/deploy/apps/syncthing/user1/hr.yaml
@@ -56,7 +56,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: "nginx"
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_SYNCTHING_USER_1}"
            paths:
--- a/kube/deploy/apps/thelounge/app/hr.yaml
+++ b/kube/deploy/apps/thelounge/app/hr.yaml
@@ -39,7 +39,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        hosts:
          - host: &host "${APP_DNS_THELOUNGE}"
            paths:
--- a/kube/deploy/apps/velociraptor/app/hr.yaml
+++ b/kube/deploy/apps/velociraptor/app/hr.yaml
@@ -39,7 +39,7 @@ spec:
      main:
        enabled: true
        primary: true
-        ingressClassName: nginx
+        ingressClassName: "nginx-internal"
        annotations:
          external-dns.alpha.kubernetes.io/target: "${IP_EC2_INGRESS}"
        hosts:
--- a/kube/deploy/core/_networking/cilium/app/hr.yaml
+++ b/kube/deploy/core/_networking/cilium/app/hr.yaml
@@ -52,7 +52,7 @@ spec:
      ui:
        ingress:
          enabled: true
-          className: "nginx"
+          className: "nginx-internal"
          hosts:
            - "${APP_DNS_HUBBLE}"
          tls:
--- a/kube/deploy/core/flux-system/webhook/ingress.yaml
+++ b/kube/deploy/core/flux-system/webhook/ingress.yaml
@@ -8,7 +8,7 @@ metadata:
    external-dns.alpha.kubernetes.io/target: "${DNS_MAIN_CF}"
    external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
 spec:
-  ingressClassName: nginx
+  ingressClassName: "nginx-internal"
  rules:
  - host: &host "${APP_DNS_FLUX_WEBHOOK}"
    http:
--- a/kube/deploy/core/ingress/ingress-nginx/app/default-backend.yaml
+++ b/kube/deploy/core/ingress/ingress-nginx/app/default-backend.yaml
@@ -58,7 +58,7 @@ metadata:
    external-dns.alpha.kubernetes.io/target: "${DNS_SHORT_CF}"
    external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
 spec:
-  ingressClassName: nginx
+  ingressClassName: "nginx-internal"
  rules:
  - host: &host "error.${DNS_SHORT}"
    http:
@@ -83,7 +83,7 @@ metadata:
    external-dns.alpha.kubernetes.io/target: "${DNS_MAIN_CF}"
    external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
 spec:
-  ingressClassName: nginx
+  ingressClassName: "nginx-internal"
  rules:
  - host: &host "error.${DNS_MAIN}"
    http:
--- a/kube/deploy/core/monitoring/grafana/app/hr.yaml
+++ b/kube/deploy/core/monitoring/grafana/app/hr.yaml
@@ -178,7 +178,7 @@ spec:
      enabled: true
    ingress:
      enabled: true
-      ingressClassName: "nginx"
+      ingressClassName: "nginx-internal"
      hosts:
        - &host "${APP_DNS_GRAFANA}"
      tls:
--- a/kube/deploy/core/monitoring/kps/app/config/prom.yaml
+++ b/kube/deploy/core/monitoring/kps/app/config/prom.yaml
@@ -2,7 +2,7 @@
 prometheus:
  ingress:
    enabled: true
-    ingressClassName: nginx
+    ingressClassName: "nginx-internal"
    hosts: &hostprom ["${APP_DNS_PROMETHEUS}"]
    tls: [hosts: *hostprom]
    paths: ["/"]
--- a/kube/deploy/core/storage/rook-ceph/cluster/app/hr.yaml
+++ b/kube/deploy/core/storage/rook-ceph/cluster/app/hr.yaml
@@ -279,7 +279,7 @@ spec:
                memory: 2Gi
        ingress:
          enabled: true
-          ingressClassName: "nginx"
+          ingressClassName: "nginx-internal"
          host:
            name: &rgw-host "${APP_DNS_RGW_S3}"
            path: "/"
@@ -297,7 +297,7 @@ spec:
      createPrometheusRules: true
    ingress:
      dashboard:
-        ingressClassName: "nginx"
+        ingressClassName: "nginx-internal"
        host:
          name: &dashboard-host "${APP_DNS_CEPH}"
          path: "/"