temp

k8s/xiongxiao.me/ingress/rancher-ingress.yaml

@@ -1,27 +1,19 @@
 ---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
+# Rancher - rancher.xiongxiao.me
+# 使用 IngressRoute 以便正确使用 Let's Encrypt 证书
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
 metadata:
-  name: rancher
+  name: rancher-https
   namespace: cattle-system
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt  # 使用 Let's Encrypt
 spec:
-  ingressClassName: traefik
-  rules:
-  - host: rancher.xiongxiao.me
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: rancher
-            port:
-              number: 80
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`rancher.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: rancher
+          port: 80
   tls:
-  - hosts:
-    - rancher.xiongxiao.me
-    # secretName: tls-rancher-ingress  # 使用自动证书,不需要手动指定 secret
+    certResolver: letsencrypt