#521 K3s Traefik Ingress 설정 및 HTTP 리다이렉션 (#522)

* configure traefik & enable HTTPS

* configure traefik & redirect http to https

Author: Boksam

kubernetes/base/frontend/ingress.yaml

@@ -0,0 +1,8 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: frontend-ingress
+  annotations:
+    kubernetes.io/ingress.class: traefik
+    traefik.ingress.kubernetes.io/router.tls.certresolver: default
+# NOTE: 호스트 및 경로 설정은 패치 파일에서 관리됩니다.

kubernetes/base/kustomization.yaml

@@ -18,5 +18,8 @@ resources:
   - ./backend/deployment.yaml
   - ./frontend/deployment.yaml
 
+  # Ingress Resources
+  - ./frontend/ingress.yaml
+
 commonLabels:
   app.kubernetes.io/managed-by: kustomize

kubernetes/overlays/dev/frontend-deployment-patch.yaml

@@ -12,4 +12,4 @@ spec:
             - name: FORCE_HTTPS
               value: "0"
             - name: SERVER_NAME
-              value: "code-place-dev.site"
+              value: "k3s.code-place-dev.site" # NOTE: 임시 K3s 테스트용 도메인 주소입니다. 추후 수정 예정입니다. (Junwoo)

kubernetes/overlays/dev/frontend-ingress-patch.yaml

@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: frontend-ingress
+spec:
+  rules:
+    - host: k3s.code-place-dev.site
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: frontend
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - k3s.code-place-dev.site

kubernetes/overlays/dev/kustomization.yaml

@@ -11,3 +11,4 @@ namespace: code-place-dev
 patches:
   - path: backend-deployment-patch.yaml
   - path: frontend-deployment-patch.yaml
+  - path: frontend-ingress-patch.yaml

kubernetes/setup/traefik/traefik-config.yaml

@@ -0,0 +1,23 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChartConfig
+metadata:
+  name: traefik
+  namespace: kube-system
+spec:
+  valuesContent: |-
+    additionalArguments:
+      - "--certificatesresolvers.default.acme.email=<EMAIL_ADDRESS>"
+      - "--certificatesresolvers.default.acme.storage=/data/acme.json"
+      - "--certificatesresolvers.default.acme.httpchallenge.entrypoint=web"
+    ports:
+      web:
+        # NOTE: Traefik Helm Chart v34부터는 `redirections` 사용 (참고: https://newreleases.io/project/github/traefik/traefik-helm-chart/release/v34.0.0)
+        redirections:
+          # HTTP 요청을 HTTPS로 리디렉션
+          entryPoint:
+            to: websecure
+            scheme: https
+            permanent: true
+      websecure:
+        tls:
+          enabled: true