apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
    name: internal-ipwhitelist
spec:
    ipWhiteList:
        sourceRange:
            - 10.10.0.1/24
            - 10.20.0.1/24
            - 10.42.1.1/24
        ipStrategy:
            depth: 0

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
    name: traefik-dashboard
spec:
    entryPoints:
        - websecure
    routes:
        - kind: Rule
          match: Host(`traefik.k3s.beta`)
          services:
              - name: api@internal
                kind: TraefikService