ingress: TLS via cert-manager (letsencrypt-prod) for onelab.k8s.selair.it

Made-with: Cursor

gitops/values/k3s-example.yaml

@@ -23,8 +23,8 @@ postgresql:
     password: "DBPasswordPlaceholder"
 
 onelab:
-  # Match how users reach the UI (Ingress host); use https:// when ingress.tls is true.
-  domain: "http://onelab.local"
+  # Public URL (must match ingress host + scheme).
+  domain: "https://onelab.k8s.selair.it"
   secrets:
     authTokenKey: "TokenAuthPlaceholder"
     monitoringToken: "TokenMonitoringPlaceholder"
@@ -40,11 +40,12 @@ revproxy:
 ingress:
   enabled: true
   className: traefik
-  # Set DNS or /etc/hosts to this host pointing at your ingress (e.g. worker external IP or LB).
-  host: onelab.local
+  host: onelab.k8s.selair.it
   path: /
   pathType: Prefix
+  tls: true
+  # cert-manager writes the certificate into this Secret in the release namespace
+  tlsSecretName: onelab-tls-k8s-selair
+  certManager:
+    clusterIssuer: letsencrypt-prod
   annotations: {}
-  tls: false
-  # tls: true
-  # tlsSecretName: onelab-tls   # create with cert-manager or kubectl