Move arr/seerr off gateway-internal to dedicated gateway

2026-06-21 10:48:08 +02:00
parent f1286e4d0b
commit d40d05894a
13 changed files with 0 additions and 240 deletions
--- a/envoy-gateway/arrstack/radarr-certificate.yaml
+++ b/envoy-gateway/arrstack/radarr-certificate.yaml
@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: radarr-tls
-  namespace: envoy-gateway
-spec:
-  secretName: radarr-tls
-  privateKey:
-    rotationPolicy: Always
-  issuerRef:
-    name: azure-dns
-    kind: ClusterIssuer
-  dnsNames:
-    - radarr.jsme.be
--- a/envoy-gateway/arrstack/radarr-gateway-patch.yaml
+++ b/envoy-gateway/arrstack/radarr-gateway-patch.yaml
@@ -1,19 +0,0 @@
- op: add
-  path: /spec/listeners/-
-  value:
-    name: radarr
-    protocol: HTTPS
-    port: 443
-    hostname: "radarr.jsme.be"
-    allowedRoutes:
-      namespaces:
-        from: Selector
-        selector:
-          matchLabels:
-            kubernetes.io/metadata.name: arrstack
-    tls:
-      mode: Terminate
-      certificateRefs:
-        - kind: Secret
-          name: radarr-tls
-          namespace: envoy-gateway
--- a/envoy-gateway/arrstack/sonarr-certificate.yaml
+++ b/envoy-gateway/arrstack/sonarr-certificate.yaml
@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: sonarr-tls
-  namespace: envoy-gateway
-spec:
-  secretName: sonarr-tls
-  privateKey:
-    rotationPolicy: Always
-  issuerRef:
-    name: azure-dns
-    kind: ClusterIssuer
-  dnsNames:
-    - sonarr.jsme.be
--- a/envoy-gateway/arrstack/sonarr-gateway-patch.yaml
+++ b/envoy-gateway/arrstack/sonarr-gateway-patch.yaml
@@ -1,19 +0,0 @@
- op: add
-  path: /spec/listeners/-
-  value:
-    name: sonarr
-    protocol: HTTPS
-    port: 443
-    hostname: "sonarr.jsme.be"
-    allowedRoutes:
-      namespaces:
-        from: Selector
-        selector:
-          matchLabels:
-            kubernetes.io/metadata.name: arrstack
-    tls:
-      mode: Terminate
-      certificateRefs:
-        - kind: Secret
-          name: sonarr-tls
-          namespace: envoy-gateway
--- a/envoy-gateway/kustomization.yaml
+++ b/envoy-gateway/kustomization.yaml
@@ -13,16 +13,12 @@ resources:
  # Certificates
  - authentik/certificate.yaml
  - argocd/certificate.yaml
-  - arrstack/radarr-certificate.yaml
-  - arrstack/sonarr-certificate.yaml
  - bentopdf/certificate.yaml
  - gitea/certificate.yaml
  - immich/certificate.yaml
  - infisical/certificate.yaml
  - it-tools/certificate.yaml
  - jellyfin/certificate.yaml
-  - seerr/certificate.yaml
-  - seerr/test-certificate.yaml
  - jenkins/certificate.yaml
  - longhorn/certificate.yaml
  - monitoring/certificate.yaml
@@ -30,7 +26,6 @@ resources:
  - netbootxyz/certificate.yaml
  - passbolt/certificate.yaml
  - proxmox/certificate.yaml
-  - prowlarr/certificate.yaml
  - resume/resume-certificate.yaml
  - resume/minio-certificate.yaml
  - resume/minio-webui-certificate.yaml
@@ -38,7 +33,6 @@ resources:
  - minio-aistor/console-certificate.yaml
  - technitium/technitium-certificate.yaml
  - technitium/technitium-backup-certificate.yaml
-  - torrent/certificate.yaml
  - truenas/certificate.yaml
  - unifi/certificate.yaml
  - wikijs/certificate.yaml
@@ -87,18 +81,6 @@ patches:
      kind: Gateway
      name: gateway-internal
    path: infisical/gateway-patch.yaml
-  - target:
-      group: gateway.networking.k8s.io
-      version: v1
-      kind: Gateway
-      name: gateway-internal
-    path: seerr/gateway-patch.yaml
-  - target:
-      group: gateway.networking.k8s.io
-      version: v1
-      kind: Gateway
-      name: gateway-internal
-    path: seerr/test-gateway-patch.yaml
  - target:
      group: gateway.networking.k8s.io
      version: v1
@@ -123,30 +105,6 @@ patches:
      kind: Gateway
      name: gateway-internal
    path: netbootxyz/gateway-patch.yaml
-  - target:
-      group: gateway.networking.k8s.io
-      version: v1
-      kind: Gateway
-      name: gateway-internal
-    path: arrstack/radarr-gateway-patch.yaml
-  - target:
-      group: gateway.networking.k8s.io
-      version: v1
-      kind: Gateway
-      name: gateway-internal
-    path: arrstack/sonarr-gateway-patch.yaml
-  - target:
-      group: gateway.networking.k8s.io
-      version: v1
-      kind: Gateway
-      name: gateway-internal
-    path: prowlarr/gateway-patch.yaml
-  - target:
-      group: gateway.networking.k8s.io
-      version: v1
-      kind: Gateway
-      name: gateway-internal
-    path: torrent/gateway-patch.yaml
  - target:
      group: gateway.networking.k8s.io
      version: v1
--- a/envoy-gateway/prowlarr/certificate.yaml
+++ b/envoy-gateway/prowlarr/certificate.yaml
@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: prowlarr-tls
-  namespace: envoy-gateway
-spec:
-  secretName: prowlarr-tls
-  privateKey:
-    rotationPolicy: Always
-  issuerRef:
-    name: azure-dns
-    kind: ClusterIssuer
-  dnsNames:
-    - prowlarr.jsme.be
--- a/envoy-gateway/prowlarr/gateway-patch.yaml
+++ b/envoy-gateway/prowlarr/gateway-patch.yaml
@@ -1,19 +0,0 @@
- op: add
-  path: /spec/listeners/-
-  value:
-    name: prowlarr
-    protocol: HTTPS
-    port: 443
-    hostname: "prowlarr.jsme.be"
-    allowedRoutes:
-      namespaces:
-        from: Selector
-        selector:
-          matchLabels:
-            kubernetes.io/metadata.name: arrstack
-    tls:
-      mode: Terminate
-      certificateRefs:
-        - kind: Secret
-          name: prowlarr-tls
-          namespace: envoy-gateway
--- a/envoy-gateway/seerr/certificate.yaml
+++ b/envoy-gateway/seerr/certificate.yaml
@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: seerr-tls
-  namespace: envoy-gateway
-spec:
-  secretName: seerr-tls
-  privateKey:
-    rotationPolicy: Always
-  issuerRef:
-    name: azure-dns
-    kind: ClusterIssuer
-  dnsNames:
-    - seerr.jsme.be
--- a/envoy-gateway/seerr/gateway-patch.yaml
+++ b/envoy-gateway/seerr/gateway-patch.yaml
@@ -1,19 +0,0 @@
- op: add
-  path: /spec/listeners/-
-  value:
-    name: seerr
-    protocol: HTTPS
-    port: 443
-    hostname: "seerr.jsme.be"
-    allowedRoutes:
-      namespaces:
-        from: Selector
-        selector:
-          matchLabels:
-            kubernetes.io/metadata.name: seerr
-    tls:
-      mode: Terminate
-      certificateRefs:
-        - kind: Secret
-          name: seerr-tls
-          namespace: envoy-gateway
--- a/envoy-gateway/seerr/test-certificate.yaml
+++ b/envoy-gateway/seerr/test-certificate.yaml
@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: seerr-test-tls
-  namespace: envoy-gateway
-spec:
-  secretName: seerr-test-tls
-  privateKey:
-    rotationPolicy: Always
-  issuerRef:
-    name: azure-dns
-    kind: ClusterIssuer
-  dnsNames:
-    - seerr-test.jsme.be
--- a/envoy-gateway/seerr/test-gateway-patch.yaml
+++ b/envoy-gateway/seerr/test-gateway-patch.yaml
@@ -1,19 +0,0 @@
- op: add
-  path: /spec/listeners/-
-  value:
-    name: seerr-test
-    protocol: HTTPS
-    port: 443
-    hostname: "seerr-test.jsme.be"
-    allowedRoutes:
-      namespaces:
-        from: Selector
-        selector:
-          matchLabels:
-            kubernetes.io/metadata.name: seerr
-    tls:
-      mode: Terminate
-      certificateRefs:
-        - kind: Secret
-          name: seerr-test-tls
-          namespace: envoy-gateway
--- a/envoy-gateway/torrent/certificate.yaml
+++ b/envoy-gateway/torrent/certificate.yaml
@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: torrent-tls
-  namespace: envoy-gateway
-spec:
-  secretName: torrent-tls
-  privateKey:
-    rotationPolicy: Always
-  issuerRef:
-    name: azure-dns
-    kind: ClusterIssuer
-  dnsNames:
-    - torrent.jsme.be
--- a/envoy-gateway/torrent/gateway-patch.yaml
+++ b/envoy-gateway/torrent/gateway-patch.yaml
@@ -1,19 +0,0 @@
- op: add
-  path: /spec/listeners/-
-  value:
-    name: torrent
-    protocol: HTTPS
-    port: 443
-    hostname: "torrent.jsme.be"
-    allowedRoutes:
-      namespaces:
-        from: Selector
-        selector:
-          matchLabels:
-            kubernetes.io/metadata.name: arrstack
-    tls:
-      mode: Terminate
-      certificateRefs:
-        - kind: Secret
-          name: torrent-tls
-          namespace: envoy-gateway