set up the frontend (staging)

this can go away, and 10.17.12.208 becomes the frontend later on

Signed-off-by: Kingdon Barrett <[email protected]>

apps/routers/talos-related-routes/water-https/water-teamhephy-ingressroute.yaml

@@ -0,0 +1,33 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: water-teamhephy
+  namespace: traefik-staging
+spec:
+  entryPoints:
+  - web
+  routes:
+  - kind: Rule
+    match: Host(`water.teamhephy.info`)
+    services:
+    - kind: Service
+      name: water-teamhephy
+      namespace: traefik-staging
+      port: 80
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: water-teamhephy
+  namespace: traefik-staging
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: HostSNI(`water.teamhephy.info`)
+    services:
+    - name: water-teamhephy
+      namespace: traefik-staging
+      port: 443
+  tls:
+    passthrough: true

apps/routers/talos-related-routes/water-https/water-teamhephy-service-endpoints.yaml

@@ -0,0 +1,31 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: water-teamhephy
+  namespace: traefik-staging
+spec:
+  ports:
+    - name: water-https
+      protocol: TCP
+      port: 443
+      targetPort: 443
+      nodePort: 0
+    - name: water-http
+      protocol: TCP
+      port: 80
+      targetPort: 80
+      nodePort: 0
+---
+kind: Endpoints
+apiVersion: v1
+metadata:
+  name: water-teamhephy
+  namespace: traefik-staging
+subsets:
+- addresses:
+  - ip: 10.17.12.208
+  ports:
+  - port: 443
+    name: water-https
+  - port: 80
+    name: water-http