Fix Rancher access: add kubectl port-forward + tailscale serve setup

infrastructure/addons/rancher/ingress-rancher.yaml

@@ -1,26 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: rancher
-  namespace: cattle-system
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: rancher
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    cert-manager.io/cluster-issuer: "selfsigned-cluster-issuer"
-spec:
-  ingressClassName: traefik
-  rules:
-    - host: k8s-cluster-cp-1.silverside-gopher.ts.net
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: rancher
-                port:
-                  number: 80
-  tls:
-    - hosts:
-        - k8s-cluster-cp-1.silverside-gopher.ts.net
-      secretName: rancher-tls

infrastructure/addons/rancher/kustomization.yaml

@@ -4,5 +4,5 @@ resources:
   - namespace.yaml
   - helmrepository-rancher.yaml
   - helmrelease-rancher.yaml
-  - ingress-rancher.yaml
+  - service-rancher-tailscale.yaml
   - rancher-bootstrap-password-externalsecret.yaml

infrastructure/addons/rancher/service-rancher-tailscale.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: rancher-tailscale
+  namespace: cattle-system
+  annotations:
+    tailscale.com/hostname: k8s-cluster-cp-1-rancher
+    tailscale.com/proxy-class: infra-stable
+spec:
+  type: LoadBalancer
+  loadBalancerClass: tailscale
+  selector:
+    app: rancher
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: 80