update traefik

configs/dev/config.json

@@ -3,5 +3,9 @@
   "name": "cluster-dev",
   "repository": "https://git.gkdomaine.fr/kubernetes/argocd.git",
   "targetRevision": "main",
-  "helmPath": "helm"
+  "helmPath": "helm",
+  "traefik": {
+    "version": "38.0.2",
+    "url": "traefik.gkdomaine.local"
+  }
 }

helm/traefik/dev/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: longhorn
-  repository: oci://harbor.gkdomaine.local/charts
-  version: 1.10.1
-digest: sha256:9abe842963b34cba5f3787caa4470d921fe074ffe8f6387f43a398babc93d29d
-generated: "2026-01-12T04:23:19.8152207+01:00"

helm/traefik/dev/Chart.yaml

@@ -1,11 +1,11 @@
 apiVersion: v2
-name: longhorn-wrapper
+name: traefik-wrapper
-description: Wrapper pour longhorn - Environnement DEV
+description: Wrapper pour traefik - Environnement DEV
 type: application
 version: 1.0.0
 
 dependencies:
-  - name: longhorn
+  - name: traefik
-    version: 1.10.1  # Assurez-vous que cette version correspond à celle poussée sur Harbor
+    version: {{ .Values.traefik.version }}  # Assurez-vous que cette version correspond à celle poussée sur Harbor
     # Utilisation de votre registre Harbor interne (OCI)
     repository: "oci://harbor.gkdomaine.local/charts"

helm/traefik/dev/templates/config.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+  namespace: "{{ .Release.Namespace }}"
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-dashboard
+  namespace: "{{ .Release.Namespace }}"
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`{{ .Values.traefik.url }}`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
+  tls:
+    secretName: traefik-default-cert

helm/traefik/dev/values.yaml

@@ -1,44 +1,62 @@
 # Toutes les configurations destinées au chart Nextcloud 
 # doivent être indentées sous la clé 'nextcloud'
-longhorn:
+traefik:
-  ui:
+  deployment:
     enabled: true
+    replicas: 1
 
-  # Persistence
+  service:
-  defaultSettings:
+    type: LoadBalancer
-    defaultDataPath: /var/lib/longhorn
+    annotations:
-    defaultReplicaCount: 3
+      metallb.universe.tf/address-pool: default
-    defaultDiskSelector: ""
+    ports:
-    defaultDataLocality: "best-effort"
+      web:
+        port: 80
+        targetPort: 8000
+      websecure:
+        port: 443
+        targetPort: 8443
 
-  # RBAC et service accounts (Helm gère par défaut)
+  ports:
-  rbac:
+    web:
-    create: true
+      port: 8000
+      expose:
+        default: true
 
-  # Installer CRDs si pas déjà faits
+    websecure:
-  installCRDs: true
+      port: 8443
+      expose:
+        default: true
 
-  image:
+  ingressClass:
-    longhorn:
+    enabled: true
-      manager:
+    isDefaultClass: true
-        # -- Registry for the Longhorn Manager image.
+
-        registry: "harbor.gkdomaine.local"
+  providers:
-        # -- Repository for the Longhorn Manager image.
+    kubernetesCRD:
-        repository: images/longhorn-manager
+      enabled: true
-        # -- Tag for the Longhorn Manager image.
+    kubernetesIngress:
-        tag: v1.10.1
+      enabled: true
-      ui:
+
-        # -- Registry for the Longhorn UI image.
+  logs:
-        registry: "harbor.gkdomaine.local"
+    general:
-        # -- Repository for the Longhorn UI image.
+      level: INFO
-        repository: images/longhorn-ui
+    access:
-        # -- Tag for the Longhorn UI image.
+      enabled: true
-        tag: v1.10.1
+
-      shareManager:
+  metrics:
-        # -- Registry for the Longhorn Share Manager image.
+    prometheus:
-        registry: "harbor.gkdomaine.local"
+      enabled: true
-        # -- Repository for the Longhorn Share Manager image.
+
-        repository: images/longhorn-share-manager
+  globalArguments:
-        # -- Tag for the Longhorn Share Manager image.
+    - "--api.dashboard=true"
-        tag: v1.10.1
+
-      
+  additionalArguments:
+    - "--entrypoints.web.address=:8000"
+    - "--entrypoints.websecure.address=:8443"
+
+  tls:
+    stores:
+      default:
+        defaultCertificate:
+          secretName: traefik-default-cert