fix(hass): Removing traefik-forward-auth for Home Assistant

apps/arr/lidarr/service.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: lidarr
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   ports:
     - name: web
       port: 8686

apps/arr/prowlarr/service.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: prowlarr
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   ports:
     - name: web
       port: 9696

apps/arr/radarr/service.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: radarr
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   ports:
     - name: web
       port: 7878

apps/arr/sonarr/service.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: sonarr
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   ports:
     - name: web
       port: 8989

apps/home-assistant/home-assistant/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-commonLabels:
-  app: home-assistant
-
-resources:
-  - service.yaml
-  - deployment.yaml

apps/home-assistant/home-assistant/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: home-assistant

apps/home-assistant/ingress.yaml

@@ -6,19 +6,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`auth-hass.stonegarden.dev`)
-      kind: Rule
-      services:
-        - name: traefik-forward-auth
-          port: 4181
-      middlewares:
-        - name: traefik-forward-auth
     - match: Host(`hass.stonegarden.dev`)
       kind: Rule
       services:
         - name: home-assistant
           port: 8123
-      middlewares:
-        - name: traefik-forward-auth
   tls:
     certResolver: letsencrypt

apps/home-assistant/kustomization.yaml

@@ -1,9 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: home-assistant
+commonLabels:
+  app: home-assistant
 
 resources:
   - namespace.yaml
+  - service.yaml
+  - deployment.yaml
   - ingress.yaml
-  - traefik-forward-auth
-  - home-assistant

apps/home-assistant/service.yaml

@@ -3,6 +3,7 @@ kind: Service
 metadata:
   name: home-assistant
 spec:
+  type: LoadBalancer
   ports:
     - name: web
       port: 8123

apps/home-assistant/traefik-forward-auth/configs/traefik-forward-auth.ini

@@ -1,5 +0,0 @@
-cookie-name = "_hass_auth"
-log-level = "error"
-cookie-domain = "stonegarden.dev"
-auth-host = "auth-hass.stonegarden.dev"
-whitelist = "[email protected], [email protected]"

apps/home-assistant/traefik-forward-auth/deployment.yaml

@@ -1,50 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: traefik-forward-auth
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: traefik-forward-auth
-  strategy:
-    type: Recreate
-  template:
-    spec:
-      terminationGracePeriodSeconds: 60
-      containers:
-        - image: thomseddon/traefik-forward-auth:2
-          name: traefik-forward-auth
-          ports:
-            - containerPort: 4181
-              protocol: TCP
-          env:
-            - name: CONFIG
-              value: "/config"
-            - name: PROVIDERS_GOOGLE_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: traefik-forward-auth-secrets
-                  key: google-client-id
-            - name: PROVIDERS_GOOGLE_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: traefik-forward-auth-secrets
-                  key: google-client-secret
-            - name: SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: traefik-forward-auth-secrets
-                  key: secret
-          volumeMounts:
-            - name: configs
-              mountPath: /config
-              subPath: traefik-forward-auth.ini
-
-      volumes:
-        - name: configs
-          configMap:
-            name: configs
-        - name: traefik-forward-auth-secrets
-          secret:
-            secretName: traefik-forward-auth-secrets

apps/home-assistant/traefik-forward-auth/kustomization.yaml

@@ -1,19 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-commonLabels:
-  app: traefik-forward-auth
-
-resources:
-  - service.yaml
-  - deployment.yaml
-  - middleware.yaml
-
-configMapGenerator:
-  - name: configs
-    files:
-      - configs/traefik-forward-auth.ini
-
-secretGenerator:
-  - name: traefik-forward-auth-secrets
-    envs:
-      - secrets/traefik-forward-auth.env

apps/home-assistant/traefik-forward-auth/middleware.yaml

@@ -1,10 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
-metadata:
-  name: traefik-forward-auth
-spec:
-  forwardAuth:
-    address: http://traefik-forward-auth.home-assistant.svc.cluster.local:4181
-    authResponseHeaders:
-      - X-Forwarded-User
-    trustForwardHeader: true

apps/home-assistant/traefik-forward-auth/service.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: traefik-forward-auth
-spec:
-  type: ClusterIP
-  selector:
-    app: traefik-forward-auth
-  ports:
-    - name: auth-http
-      port: 4181

apps/whoami/traefik-forward-auth/service.yaml

@@ -1,6 +1,3 @@
-#
-# Auth Service
-#
 apiVersion: v1
 kind: Service
 metadata: