Reset git history for making manifests public

unifi/backendtlspolicy.yaml

@@ -0,0 +1,16 @@
+apiVersion: gateway.networking.k8s.io/v1alpha3
+kind: BackendTLSPolicy
+metadata:
+  name: unifi-backend-tls
+  namespace: unifi
+spec:
+  targetRefs:
+    - group: ""
+      kind: Service
+      name: unifi
+  validation:
+    caCertificateRefs:
+      - kind: ConfigMap
+        group: ""
+        name: unifi-ca-cert
+    hostname: unifi.local

unifi/backendtrafficpolicy.yaml

@@ -0,0 +1,15 @@
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: BackendTrafficPolicy
+metadata:
+  name: unifi-backend-traffic
+  namespace: unifi
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: unifi-route
+  useClientProtocol: true
+  timeout:
+    http:
+      connectionIdleTimeout: "3600s"
+      requestTimeout: "0s"

unifi/httproute.yaml

@@ -0,0 +1,51 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: unifi-route
+  namespace: unifi
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: gateway-internal
+      namespace: envoy-gateway
+      sectionName: unifi
+  hostnames:
+    - "unifi.jsme.be"
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      filters:
+        - type: URLRewrite
+          urlRewrite:
+            hostname: "unifi.local"
+        - type: RequestHeaderModifier
+          requestHeaderModifier:
+            set:
+              - name: X-Forwarded-Host
+                value: "unifi.jsme.be"
+              - name: X-Forwarded-Proto
+                value: https
+              - name: Origin
+                value: "https://unifi.local"
+        - type: ResponseHeaderModifier
+          responseHeaderModifier:
+            set:
+              - name: Strict-Transport-Security
+                value: "max-age=31536000; includeSubDomains"
+              - name: X-Content-Type-Options
+                value: nosniff
+              - name: X-Frame-Options
+                value: SAMEORIGIN
+              - name: Referrer-Policy
+                value: strict-origin-when-cross-origin
+              - name: Permissions-Policy
+                value: "camera=(), microphone=(), geolocation=(), payment=()"
+      backendRefs:
+        - name: unifi
+          port: 443
+          kind: Service
+          group: ""
+          weight: 1

unifi/unifi-ca-cert.yaml

@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: unifi-ca-cert
+  namespace: unifi
+data:
+  ca.crt: |-
+    -----BEGIN CERTIFICATE-----
+    MIIDNTCCAh2gAwIBAgIJDoXMaduYsVQxMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNV
+    BAMTC3VuaWZpLmxvY2FsMB4XDTI0MDkwNjE4MzI1M1oXDTI2MTIxMDE4MzI1M1ow
+    FjEUMBIGA1UEAxMLdW5pZmkubG9jYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
+    ggEKAoIBAQC/lm4dUUDjCpUWSyzd1El5jHoCGYpaeQ2ZqdZpU5XQg9rXXVTJ+QvI
+    lE8ZFmJadJSxFz8c+FF49V6P57w+3G3UaTn05CJEyythBfUlpzPvTWWnc9CFgCv3
+    eJXfVO4WbEATYLXg0QUTxdY1Vo9f7S55UCGvaw71/Join3u7jyB4mBBpdkLTtbuE
+    bO5mbe+uLq35m+a8ClacmGjYBqxSLgZQa24cm69XU7H20d/kwUttkDs4gGu8loMj
+    drSR0gW5EfWt8QTL7yEF2Ft9KWNIZ0I8b5eV8lGYQIuQMawVZfhFB7Gz9ifoVphI
+    k9FNWLEEEu9Rlk2zYHALW6p21eFgqdWlAgMBAAGjgYUwgYIwCwYDVR0PBAQDAgL0
+    MDEGA1UdJQQqMCgGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUF
+    BwMIMEAGA1UdEQQ5MDeCC3VuaWZpLmxvY2Fsgglsb2NhbGhvc3SCBVs6OjFdhwR/
+    AAABhxD+gAAAAAAAAAAAAAAAAAABMA0GCSqGSIb3DQEBCwUAA4IBAQAREY+I2O7N
+    n/DNaePvocJ3A2YgzsS3Rjr1ktoFTZIPBYXzwfs8WlE4f10JMJLzcdyFNDF4fINV
+    xJzdjkYUnDG0UoIGskU2h/TS8rKo3+V3vfa6S1d9h02o8+0GRcOO0LNTtcQGg6RS
+    Mmd1FVVWET5cyiUZsvf/bieaPu6LXFQGtBpsARqlt0AF9tde03sqo8HZyWNV7oYQ
+    omNXVvV/0ieSxm6IW5bwMyVSZugM5/ld0X3CSxWyPK3vSAY2w97sq7Ey8d3N0iC/
+    oEMzB31Bz2JbRdPHNU8wEwIWhc11nucEoDqiDJ99syajle9L/pbED9erJMKRQfki
+    6YZZZ4dXKJ/O
+    -----END CERTIFICATE-----

unifi/unifi-endpointslice.yaml

@@ -0,0 +1,18 @@
+apiVersion: discovery.k8s.io/v1
+kind: EndpointSlice
+metadata:
+  name: unifi
+  namespace: unifi 
+  labels:
+    kubernetes.io/service-name: unifi
+addressType: IPv4
+ports:
+  - port: 443
+    protocol: TCP
+endpoints:
+  - addresses:
+      - "10.8.69.1"
+    conditions:
+      ready: true
+      serving: true
+      terminating: false

unifi/unifi-svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: unifi
+  namespace: unifi 
+spec:
+  ports:
+    - protocol: TCP
+      port: 443 
+      targetPort: 443 
+  type: ClusterIP