feat: NpmCache | swap ingress to traefik

npmcache/manifest.yaml

@@ -114,6 +114,20 @@ spec:
       targetPort: 4873
   type: ClusterIP
 ---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: verdaccio
+  namespace: homelab
+spec:
+  ipAllowList:
+    sourceRange:
+      - "127.0.0.1/32"
+      - "10.43.0.0/16"
+  rateLimit:
+    average: 10
+    burst: 50
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -124,12 +138,10 @@ metadata:
     cert-manager.io/acme-challenge-type: "dns01"
     cert-manager.io/private-key-size: "4096"
 
-    # NGINX IP-based rate limiting
-    nginx.ingress.kubernetes.io/limit-rps: "10"
-    nginx.ingress.kubernetes.io/limit-burst-multiplier: "5"
-    nginx.ingress.kubernetes.io/limit-whitelist: "127.0.0.1"
+    # Traefik Middleware
+    traefik.io/router.middlewares: "verdaccio@kubernetescrd"
 spec:
-  ingressClassName: nginx-internal
+  ingressClassName: traefik
   tls:
     - hosts:
         - npm.dogar.dev