gitea ssh through traefik

gitea/helmrelease-gitea.yaml

@@ -149,9 +149,9 @@ spec:
       ## @param service.ssh.loadBalancerSourceRanges Source range filter for ssh loadbalancer
       ## @param service.ssh.annotations SSH service annotations
       ssh:
-        type: LoadBalancer
+        type: ClusterIP
         port: 22
-        clusterIP: None
+        clusterIP:
         loadBalancerIP:
         nodePort:
         externalTrafficPolicy:
@@ -160,9 +160,7 @@ spec:
         ipFamilies:
         hostPort:
         loadBalancerSourceRanges: []
-        annotations:
-          metallb.universe.tf/loadBalancerIPs: 192.168.2.202
-          metallb.universe.tf/allow-shared-ip: gitea-ssh
+        annotations: {}
 
     ## @section Ingress
     ## @param ingress.enabled Enable ingress

gitea/ingress-route-tcp.yaml

@@ -0,0 +1,13 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: gitea-ssh
+  namespace: gitea
+spec:
+  entryPoints:
+    - gitea-ssh
+  routes:
+  - match: HostSNI(`*`)
+    services:
+    - name: gitea-ssh
+      port: 22

traefik/helmrelease-traefik.yaml

@@ -754,6 +754,9 @@ spec:
         exposedPort: 9100
         # -- The port protocol (TCP/UDP)
         protocol: TCP
+      gitea-ssh:
+        port: 55522
+        expose: true
 
     # -- TLS Options are created as TLSOption CRDs
     # https://doc.traefik.io/traefik/https/tls/#tls-options