Add middleware-https-proto.yaml to enforce HTTPS scheme for Headlamp and update kustomization.yaml and values.yaml accordingly

2026-05-14 18:27:42 -04:00
parent 8e42777a1d
commit af3ab32de8
3 changed files with 19 additions and 0 deletions
--- a/clusters/noble/bootstrap/headlamp/values.yaml
+++ b/clusters/noble/bootstrap/headlamp/values.yaml
@@ -26,6 +26,8 @@ ingress:
  ingressClassName: traefik
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
+    # Headlamp OIDC behind Traefik: ensure external TLS scheme reaches the app (see middleware-https-proto.yaml).
+    traefik.ingress.kubernetes.io/router.middlewares: headlamp-https-proto@kubernetescrd
  hosts:
    - host: headlamp.apps.noble.lab.pcenicni.dev
      paths: