feat: add traefik servertransport that allows ingressing self-signed https backends

k8s/argo-apps/authentik.yaml

@@ -16,7 +16,6 @@ spec:
         valuesObject:
           authentik:
               secret_key: file:///authentik-creds/secret_key
-              reporting_enabled: false
               email:
                 host: mail.fukurokuju.dev
                 port: 465
@@ -62,6 +61,9 @@ spec:
               type: LoadBalancer
               servicePortHttp: 9000
               servicePortHttps: 9443
+              annotations:
+                traefik.ingress.kubernetes.io/service.serversscheme: https
+                traefik.ingress.kubernetes.io/service.serverstransport: apps-fuku-skipverify-authentik@kubernetescrd
             metrics:
               enabled: true
               service:

k8s/services/authentik/serverstransport.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: ServersTransport
+metadata:
+  name: skipverify-authentik
+  namespace: apps-fuku
+spec:
+  insecureSkipVerify: true