apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: sonarr-route
  namespace: arrstack
  # NOTE: original ingress had VPN IP whitelist (whitelist-source-range)
  # Gateway API has no direct equivalent — handle with NetworkPolicy if needed
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: gateway-internal
      namespace: envoy-gateway
      sectionName: sonarr
  hostnames:
    - "sonarr.jsme.be"
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: /
      backendRefs:
        - name: sonarr
          namespace: arrstack
          port: 8989
          kind: Service
          group: ""
          weight: 1