deploy(gx10): add DeviceManagement agent mTLS route

2026-06-19 00:51:01 -05:00
parent 14d89ba49d
commit 0d71a789c2
7 changed files with 125 additions and 6 deletions
--- a/apps-gx10/fc-devicemgmt/ingressroute-devicemgmt-agent-mtls.json
+++ b/apps-gx10/fc-devicemgmt/ingressroute-devicemgmt-agent-mtls.json
@@ -0,0 +1,42 @@
+{
+  "apiVersion": "traefik.io/v1alpha1",
+  "kind": "IngressRoute",
+  "metadata": {
+    "name": "devicemgmt-agent-mtls",
+    "namespace": "fc-devicemgmt"
+  },
+  "spec": {
+    "entryPoints": [
+      "websecure"
+    ],
+    "routes": [
+      {
+        "kind": "Rule",
+        "match": "Host(`devices-agent.iamworkin.lan`)",
+        "middlewares": [
+          {
+            "name": "devicemgmt-agent-strip-forwarded-cert",
+            "namespace": "fc-devicemgmt"
+          },
+          {
+            "name": "devicemgmt-agent-pass-client-cert",
+            "namespace": "fc-devicemgmt"
+          }
+        ],
+        "services": [
+          {
+            "name": "fc-devicemgmt-web",
+            "port": 80
+          }
+        ]
+      }
+    ],
+    "tls": {
+      "options": {
+        "name": "devicemgmt-agent-mtls",
+        "namespace": "fc-devicemgmt"
+      },
+      "secretName": "fc-devicemgmt-agent-tls"
+    }
+  }
+}