mtls fix 3

.woodpecker/predeploy.yml

@@ -33,7 +33,7 @@ steps:
         --namespace=$NAMESPACE 
         --dry-run=client -o yaml | kubectl apply -f - 
       - kubectl apply -f deployment/configmap.yaml -n $NAMESPACE
-      - kubectl apply -f deployment/mtls-config.yaml -n $NAMESPACE
+      - kubectl apply -f deployment/mtls-config.yaml # NO NAMESPACE HERE
     when:
       event: [tag]
 

deployment/api-deployment.yaml

@@ -107,8 +107,8 @@ metadata:
   name: api-ingress
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production-http
-    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd,homea2-security-headers@kubernetescrd
-    traefik.ingress.kubernetes.io/router.tls.options: homea2-mtls@kubernetescrd
+    traefik.ingress.kubernetes.io/router.middlewares: default-mtls-auth@kubernetescrd,default-security-headers@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls.options: default-homea2-mtls@kubernetescrd
 spec:
   tls:
     - hosts:

deployment/mtls-config.yaml

@@ -2,6 +2,7 @@ apiVersion: traefik.containo.us/v1alpha1
 kind: TLSOption
 metadata:
   name: homea2-mtls
+  namespace: default
 spec:
   clientAuth:
     secretNames:
@@ -19,6 +20,7 @@ apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
 metadata:
   name: mtls-auth
+  namespace: default
 spec:
   headers:
     customRequestHeaders:
@@ -35,6 +37,7 @@ apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
 metadata:
   name: security-headers
+  namespace: default
 spec:
   headers:
     customResponseHeaders:

deployment/ui-deployment.yaml

@@ -84,8 +84,8 @@ metadata:
   name: ui-ingress
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production-http
-    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd,homea2-security-headers@kubernetescrd
-    traefik.ingress.kubernetes.io/router.tls.options: homea2-mtls@kubernetescrd
+    traefik.ingress.kubernetes.io/router.middlewares: default-mtls-auth@kubernetescrd,default-security-headers@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls.options: default-homea2-mtls@kubernetescrd
 spec:
   tls:
     - hosts: