feat: route observability through one tailscale endpoint

2026-03-07 01:04:03 +00:00
parent be04602bfb
commit 4c104f74e8
6 changed files with 71 additions and 13 deletions
--- a/infrastructure/addons/observability/traefik-tailscale-service.yaml
+++ b/infrastructure/addons/observability/traefik-tailscale-service.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: traefik-tailscale
+  namespace: kube-system
+  annotations:
+    tailscale.com/hostname: observability
+    tailscale.com/proxy-class: infra-stable
+spec:
+  type: LoadBalancer
+  loadBalancerClass: tailscale
+  selector:
+    app.kubernetes.io/instance: traefik-kube-system
+    app.kubernetes.io/name: traefik
+  ports:
+    - name: web
+      port: 80
+      protocol: TCP
+      targetPort: web
+    - name: websecure
+      port: 443
+      protocol: TCP
+      targetPort: websecure