mTLS 2

.gitignore

@@ -64,3 +64,5 @@ poetry.lock
 
 apps/homekit/homekit.state
 
+tools/ca/
+tools/clients/

deployment/api-deployment.yaml

@@ -107,6 +107,8 @@ metadata:
   name: api-ingress
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production-http
+    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd,homea2-security-headers@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls.options: homea2-homea2-mtls@kubernetescrd
     # Traefik 2 mTLS Configuration
     traefik.ingress.kubernetes.io/router.tls.options: homea2-mtls@kubernetescrd
     traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd

deployment/ui-deployment.yaml

@@ -84,6 +84,8 @@ metadata:
   name: ui-ingress
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production-http
+    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd,homea2-security-headers@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls.options: homea2-homea2-mtls@kubernetescrd
     # Traefik 2 mTLS Configuration
     traefik.ingress.kubernetes.io/router.tls.options: homea2-mtls@kubernetescrd
     traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd