From ecad6a561fa974b695233155c7fbd20669094ef2 Mon Sep 17 00:00:00 2001
From: davide <davide@davidepiu.xyz>
Date: Thu, 19 Feb 2026 21:51:24 +0000
Subject: [PATCH] Add HTTP to HTTPS redirect for all ingresses

---
 clusters/lab/apps/online-boutique.yaml            | 1 +
 clusters/lab/infrastructure/traefik-redirect.yaml | 9 +++++++++
 clusters/lab/infrastructure/weave-gitops.yaml     | 1 +
 3 files changed, 11 insertions(+)
 create mode 100644 clusters/lab/infrastructure/traefik-redirect.yaml

diff --git a/clusters/lab/apps/online-boutique.yaml b/clusters/lab/apps/online-boutique.yaml
index 703db22..fd00701 100644
--- a/clusters/lab/apps/online-boutique.yaml
+++ b/clusters/lab/apps/online-boutique.yaml
@@ -125,6 +125,7 @@ metadata:
   namespace: online-boutique
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik
   rules:
diff --git a/clusters/lab/infrastructure/traefik-redirect.yaml b/clusters/lab/infrastructure/traefik-redirect.yaml
new file mode 100644
index 0000000..a7ee650
--- /dev/null
+++ b/clusters/lab/infrastructure/traefik-redirect.yaml
@@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+  namespace: default
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
diff --git a/clusters/lab/infrastructure/weave-gitops.yaml b/clusters/lab/infrastructure/weave-gitops.yaml
index 2f68c2a..059ff10 100644
--- a/clusters/lab/infrastructure/weave-gitops.yaml
+++ b/clusters/lab/infrastructure/weave-gitops.yaml
@@ -64,6 +64,7 @@ metadata:
   namespace: flux-system
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
 spec:
   ingressClassName: traefik
   rules: