"Updates"

TuringPi/k3sup.md

@@ -82,7 +82,7 @@ chmod 700 get_helm.sh
 helm version
 ```
 
-#### Headlamp
+#### [Headlamp](https://headlamp.dev/docs/latest/)
 
 ```bash
 # first add our custom repo to your local helm repositories
@@ -115,6 +115,133 @@ kubectl --namespace kube-system port-forward $POD_NAME 8080:$CONTAINER_PORT
 kubectl create token bb-headlamp --namespace kube-system
 ```
 
+#### [longhorn](https://longhorn.io)
+
+```bash
+USER=admin; PASSWORD=v5bB4OQRDfY5tFJ1; echo "${USER}:$(openssl passwd -stdin -apr1 <<< ${PASSWORD})" >> auth
+
+sudo k3s kubectl -n longhorn-system create secret generic basic-auth --from-file=auth
+
+vim longhorn-ingress.yml
 ```
-eyJhbGciOiJSUzI1NiIsImtpZCI6InJJMkRkd2MzMUw5cDR0WHY5bnNHRHpjQ0kwdmNuOHdWSTZValZvTWlLZlkifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjLmNsdXN0ZXIubG9jYWwiLCJrM3MiXSwiZXhwIjoxNzcxMzQ4Nzk5LCJpYXQiOjE3NzEzNDUxOTksImlzcyI6Imh0dHBzOi8va3ViZXJuZXRlcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwianRpIjoiODAyZWVhNGYtN2EwNC00ZjQyLTgyNTUtYTVhYzQ0ZTBmZWI3Iiwia3ViZXJuZXRlcy5pbyI6eyJuYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsInNlcnZpY2VhY2NvdW50Ijp7Im5hbWUiOiJiYi1oZWFkbGFtcCIsInVpZCI6ImYxMmY0MzM4LWYxZDgtNGYwNy1iYTAzLTU5NTc1MWIzNGZhNCJ9fSwibmJmIjoxNzcxMzQ1MTk5LCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06YmItaGVhZGxhbXAifQ.UySnaWZ_dIqPGmFPcOgvDi7vvUR9S728ifJChFtsr577TyY9rz6h1CrRQuTXVpfdFbh2jHLpP6QSOvyQkKQX6CYvH-YVZRSTr6v_StG-doKlKWdNpirStGPxQSnkDq3xG0weeUt7xhObSj91oKqylekAx6MMu2miGHTere8zvaLC1NVcu8pgJlXaDHyMQnAyLy6nACu6fH7g4Yvkdl-VcjeII_JtoQQMPXl8wtl25PsDU0tHHQ3K2IB4qyFEwTPVDoLC_jdwgd_5V-Cy82wdGP403dF-6tQiMoniDRO_NiClVJBMEh5r-spKBVF2mMaNknFHzVK8ANQhWyJKFeDAyA
+
+```
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: longhorn-basic-auth-secret
+  namespace: longhorn-system
+data:
+  users: |2
+    YWRtaW46JGFwcjEkMmp5TzMwYmskRE5IV0VEQW1VQXFVajVGOHNvdXNVMAoK
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: longhorn-basic-auth-middleware
+spec:
+  basicAuth:
+    secret: longhorn-basic-auth-secret
+    realm: "Longhorn Dashboard"
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: longhorn-ingress
+  namespace: longhorn-system
+  annotations:
+    spec.ingressClassName: traefik
+    traefik.ingress.kubernetes.io/router.middlewares: longhorn-system-longhorn-basic-auth-middleware@kubernetescrd
+spec:
+  rules:
+  - http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: longhorn-frontend
+            port:
+              number: 80
+```
+
+```bash
+sudo k3s kubectl -n longhorn-system apply -f longhorn-ingress.yml
+```
+
+#### traefik
+
+```bash
+vim traefik-ingress.yml
+```
+
+```
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: traefik-basic-auth-secret
+  namespace: kube-system
+data:
+  users: |2
+    YWRtaW46JGFwcjEkMmp5TzMwYmskRE5IV0VEQW1VQXFVajVGOHNvdXNVMAoK
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: traefik-basic-auth-middleware
+spec:
+  basicAuth:
+    secret: traefik-basic-auth-secret
+    realm: "Traefik Dashboard"
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: traefik-ingress
+  namespace: kube-system
+  annotations:
+    spec.ingressClassName: traefik
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-traefik-basic-auth-middleware@kubernetescrd
+spec:
+  rules:
+  - host: trfk.delmar.bzh
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: traefik-dashboard
+            port:
+              number: 9000
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dashboard
+spec:
+  entryPoints:
+    - web 
+    - websecure
+  routes:
+    - match: Host(`trfk.delmar.bzh`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
+      middlewares:
+        - name: traefik-basic-auth-middleware
+  tls:
+    secretName: traefik-tls
+```
+
+```bash
+sudo k3s kubectl -n kube-system apply -f traefik-ingress.yml
 ```