From a660e4a77e0cf8affcddeb36f74b3e015ce7db87 Mon Sep 17 00:00:00 2001
From: artem <artem@webart-tech.ru>
Date: Sat, 19 Sep 2026 17:43:03 +0300
Subject: [PATCH] https redirect

---
 ai/dogs.yml | 41 +++++++++++++++++++++++++++++++++++++++++
 strava.yml  | 41 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 82 insertions(+)

diff --git a/ai/dogs.yml b/ai/dogs.yml
index e5bad13..e8d350c 100644
--- a/ai/dogs.yml
+++ b/ai/dogs.yml
@@ -50,6 +50,46 @@ spec:
 
 ---
 
+# Middleware: redirect all HTTP to HTTPS
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-to-https
+  namespace: dogs-ai-dev
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+
+---
+
+# HTTP Ingress: redirects to HTTPS
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: dogs-ai-ingress-redirect
+  namespace: dogs-ai-dev
+  annotations:
+    kubernetes.io/ingress.class: "traefik"
+    traefik.ingress.kubernetes.io/router.entrypoints: "web"
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: "xn-----6kcp3cadbabfh8a0a.xn--p1ai"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: dogs-ai-service
+            port:
+              number: 8000
+        middlewares:
+        - name: redirect-to-https
+
+---
+
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -57,6 +97,7 @@ metadata:
   namespace: dogs-ai-dev
   annotations:
     kubernetes.io/ingress.class: "traefik"
+    traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
     cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: traefik
diff --git a/strava.yml b/strava.yml
index 1a28cd3..00aa1c9 100644
--- a/strava.yml
+++ b/strava.yml
@@ -129,6 +129,46 @@ spec:
 
 ---
 
+# Middleware: redirect all HTTP to HTTPS
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-to-https
+  namespace: cycle-dev
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+
+---
+
+# HTTP Ingress: redirects to HTTPS
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: cycle-ingress-redirect
+  namespace: cycle-dev
+  annotations:
+    kubernetes.io/ingress.class: "traefik"
+    traefik.ingress.kubernetes.io/router.entrypoints: "web"
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: "cycle-rider.ru"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: cycle-frontend-service
+            port:
+              number: 80
+        middlewares:
+        - name: redirect-to-https
+
+---
+
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -136,6 +176,7 @@ metadata:
   namespace: cycle-dev
   annotations:
     kubernetes.io/ingress.class: "traefik"
+    traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
     cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: traefik