apiVersion: v1
kind: ConfigMap
metadata:
  name: traefik-edge-dynamic-k3s
  namespace: traefik-system
  labels:
    app.kubernetes.io/name: traefik
    app.kubernetes.io/component: edge-dynamic
data:
  10-k3s.yaml: |
    tcp:
      routers:
        # Alle k3s Domains (inkl. *.apps.internal.*) über TLS Passthrough
        k3s-passthrough:
          rule: "HostSNIRegexp(`^.+\\.k3s\\.stabify\\.de$`)"
          entryPoints:
            - websecure
          service: k3s-cluster
          tls:
            passthrough: true

      services:
        k3s-cluster:
          loadBalancer:
            servers:
              - address: "10.100.40.6:443"