apiVersion: gateway.networking.k8s.io/v1alpha2
kind: TCPRoute
metadata:
  name: authentik-ldap
  namespace: authentik
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: gateway-internal
      namespace: envoy-gateway
      sectionName: authentik-ldap
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: gateway-internal
      namespace: envoy-gateway
      sectionName: authentik-ldaps
  rules:
    # The gateway terminates TLS on 636, so both listeners hit the plaintext port
    - backendRefs:
        - name: authentik-ldap
          port: 3389
          kind: Service
          group: ""
          weight: 1