http redirect to https

kustomization/bases/kustomization.yaml

@@ -4,7 +4,7 @@ resources:
   - ./nocodelytics-events-worker.yaml
   - ./nocodelytics-tracker-api.yaml
   - ./cert-manager.yaml
-
+  - ./traefik.yaml
 secretGenerator:
   - name: regcred
     type: kubernetes.io/dockerconfigjson

kustomization/bases/nocodelytics-dashboard.yaml

@@ -107,13 +107,6 @@ spec:
     - host: default.nocodelytics.com
       http:
         paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: ssl-redirect
-                port:
-                  name: use-annotation
           - path: /
             pathType: Prefix
             backend:

kustomization/bases/traefik.yaml

@@ -0,0 +1,8 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: https-redirect
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true

kustomization/overlays/production/nocodelytics-dashboard.yaml

@@ -11,6 +11,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: nocodelytics-dashboard-nginx-ingress
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: production-https-redirect@kubernetescrd
 spec:
   rules:
     - host: api.nocodelytics.com

kustomization/overlays/staging/nocodelytics-dashboard.yaml

@@ -11,18 +11,13 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: nocodelytics-dashboard-nginx-ingress
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: staging-https-redirect@kubernetescrd
 spec:
   rules:
     - host: staging.nocodelytics.com
       http:
         paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: ssl-redirect
-                port:
-                  name: use-annotation
           - path: /
             pathType: Prefix
             backend: