From 08e87f674287948a82495dc710c6123aec85d3e3 Mon Sep 17 00:00:00 2001
From: admin <admin@pit4noshit.de>
Date: Sat, 5 Sep 2026 00:43:56 +0200
Subject: [PATCH] traefik: restore dashboard IngressRoute+Certificate under
 GitOps, lost when RKE2's traefik CRDs were removed

---
 key-components/traefik-dashboard.yaml | 30 +++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 key-components/traefik-dashboard.yaml

diff --git a/key-components/traefik-dashboard.yaml b/key-components/traefik-dashboard.yaml
new file mode 100644
index 0000000..7106143
--- /dev/null
+++ b/key-components/traefik-dashboard.yaml
@@ -0,0 +1,30 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: traefik-dashboard-tls
+  namespace: traefik
+spec:
+  secretName: traefik-dashboard-tls
+  dnsNames:
+    - traefik.pit4noshit.de
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: traefik-dashboard
+  namespace: traefik
+spec:
+  ingressClassName: traefik
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`traefik.pit4noshit.de`)
+      kind: Rule
+      services:
+        - name: api@internal
+          kind: TraefikService
+  tls:
+    secretName: traefik-dashboard-tls