traefik v1.7 kubernetes doc fixes

examples/traefik-v1.7/kubernetes/advanced-single-pod/traefik/deployment.yaml

@@ -29,11 +29,9 @@ spec:
         ports:
         - name: http
           containerPort: 80
-          hostPort: 80
           protocol: TCP
         - name: https
           containerPort: 443
-          hostPort: 443
           protocol: TCP
         - name: dash
           containerPort: 8080
@@ -52,10 +50,14 @@ spec:
         env:
         - name: CONFIG
           value: "/config"
-        - name: COOKIE_DOMAIN
-          value: "example.com"
         - name: DOMAIN
           value: "example.com"
+        # INSECURE_COOKIE is required if not using a https entrypoint
+        # - name: INSECURE_COOKIE
+        #   value: "true"
+        # Remove COOKIE_DOMAIN if not using auth host mode
+        - name: COOKIE_DOMAIN
+          value: "example.com"
         - name: AUTH_HOST
           value: "auth.example.com"
         - name: LOG_LEVEL
@@ -70,11 +72,11 @@ spec:
             secretKeyRef:
               name: secrets
               key: google-client-secret
-        - name: COOKIE_SECRET
+        - name: SECRET
           valueFrom:
             secretKeyRef:
               name: secrets
-              key: cookie-secret
+              key: secret
         volumeMounts:
         - name: configs
           mountPath: /config

examples/traefik-v1.7/kubernetes/advanced-single-pod/traefik/kustomization.yaml

@@ -18,7 +18,7 @@ configMapGenerator:
 - name: configs
   files:
     - configs/traefik.toml
-    - config/traefik-forward-auth.ini
+    - configs/traefik-forward-auth.ini
 
 #
 # Secrets

examples/traefik-v1.7/kubernetes/advanced-single-pod/traefik/secrets/traefik-forward-auth.env

@@ -1,3 +1,3 @@
 google-client-id=client-id
 google-client-secret=client-secret
-cookie-secret=something-random
+secret=something-random

examples/traefik-v1.7/kubernetes/advanced-single-pod/traefik/service.yaml

@@ -1,4 +1,26 @@
 #
+# Traefik Service
+#
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik
+  labels:
+    app: traefik
+spec:
+  # Use NodePort if required
+  type: LoadBalancer
+  selector:
+    app: traefik
+  ports:
+  - name: http
+    port: 80
+    targetPort: 80
+  - name: https
+    port: 443
+    targetPort: 443
+---
+#
 # Auth Service
 #
 apiVersion: v1