modified: apps/argocd-ingress/ingress.yaml

new file:   apps/argocd-ingress/transport.yaml

apps/argocd-ingress/ingress.yaml

@@ -4,10 +4,11 @@ metadata:
   name: argocd-server-ingress
   namespace: argocd
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod # <-- Zertifikat holen
+    cert-manager.io/cluster-issuer: letsencrypt-prod
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
     traefik.ingress.kubernetes.io/router.tls: "true"
-    traefik.ingress.kubernetes.io/service.serversscheme: https # <-- WICHTIG: Backend spricht HTTPS
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+    traefik.ingress.kubernetes.io/service.serverstransport: argocd-argocd-transport@kubernetescrd
 spec:
   tls: # <-- Zertifikat speichern
     - hosts:

apps/argocd-ingress/transport.yaml

@@ -0,0 +1,7 @@
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: argocd-transport
+  namespace: argocd
+spec:
+  insecureSkipVerify: true