traefik

infra/values/base/traefik-values.yaml

@@ -2,6 +2,8 @@ providers:
   kubernetesIngress:
     publishedService: # Fixes ArgoCD health checks for LoadBalancer services
       enabled: true
+  kubernetesCRD:
+    allowCrossNamespace: true
 deployment:
   replicas: 2
 
@@ -48,3 +50,26 @@ ports:
       accessLogs: true
       metrics: true
       tracing: true
+
+  gitea-ssh:
+    port: 2222
+    expose:
+      default: true
+    exposedPort: 2222
+    protocol: TCP
+
+# -- IngressRouteTCP for Gitea SSH (cross-namespace to gitea/gitea-ssh service)
+extraObjects:
+- apiVersion: traefik.io/v1alpha1
+  kind: IngressRouteTCP
+  metadata:
+    name: gitea-ssh
+  spec:
+    entryPoints:
+    - gitea-ssh
+    routes:
+    - match: HostSNI(`*`)
+      services:
+      - name: gitea-ssh
+        namespace: gitea
+        port: 22

infra/values/upc-dev/traefik-values.yaml

@@ -10,6 +10,10 @@ service:
               {
                   "name": "websecure",
                   "mode": "tcp"
+              },
+              {
+                  "name": "gitea-ssh",
+                  "mode": "tcp"
               }
           ],
           "backends": [
@@ -24,6 +28,9 @@ service:
                   "properties": {
                       "outbound_proxy_protocol": "v2"
                   }
+              },
+              {
+                  "name": "gitea-ssh"
               }
           ]
       }