Jeffrey
30f9c63c9b
The API server defaults group on allowedRoutes.kinds and certificateRefs, and group, kind and weight on the TCPRoute backendRefs. Omitting them left both ArgoCD apps permanently OutOfSync against the live objects. Matches what authentik-httproute.yaml already does.
26 lines
671 B
YAML
26 lines
671 B
YAML
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
kind: TCPRoute
|
|
metadata:
|
|
name: authentik-ldap
|
|
namespace: authentik
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
namespace: envoy-gateway
|
|
sectionName: authentik-ldap
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
namespace: envoy-gateway
|
|
sectionName: authentik-ldaps
|
|
rules:
|
|
# The gateway terminates TLS on 636, so both listeners hit the plaintext port
|
|
- backendRefs:
|
|
- name: authentik-ldap
|
|
port: 3389
|
|
kind: Service
|
|
group: ""
|
|
weight: 1
|