357 lines
10 KiB
YAML
357 lines
10 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- gateway.yaml
|
|
- gateway-public.yaml
|
|
|
|
# Policies
|
|
- pelican/pelican-wings-clienttrafficpolicy.yaml
|
|
- minio-aistor/minio-aistor-clienttrafficpolicy.yaml
|
|
- minio-aistor/minio-aistor-console-clienttrafficpolicy.yaml
|
|
|
|
# Certificates
|
|
- authentik/authentik-certificate.yaml
|
|
- argocd/argocd-certificate.yaml
|
|
- bentopdf/bentopdf-certificate.yaml
|
|
- gitea/gitea-certificate.yaml
|
|
- immich/immich-certificate.yaml
|
|
- infisical/infisical-certificate.yaml
|
|
- it-tools/it-tools-certificate.yaml
|
|
- jellyfin/jellyfin-certificate.yaml
|
|
- jenkins/jenkins-certificate.yaml
|
|
- longhorn/longhorn-certificate.yaml
|
|
- monitoring/monitoring-certificate.yaml
|
|
- n8n/n8n-certificate.yaml
|
|
- netbootxyz/netbootxyz-certificate.yaml
|
|
- passbolt/passbolt-certificate.yaml
|
|
- proxmox/proxmox-certificate.yaml
|
|
- resume/resume-certificate.yaml
|
|
- resume/resume-minio-certificate.yaml
|
|
- resume/resume-minio-webui-certificate.yaml
|
|
- minio-aistor/minio-aistor-api-certificate.yaml
|
|
- minio-aistor/minio-aistor-console-certificate.yaml
|
|
- technitium/technitium-certificate.yaml
|
|
- technitium/technitium-backup-certificate.yaml
|
|
- truenas/truenas-certificate.yaml
|
|
- unifi/unifi-certificate.yaml
|
|
- wikijs/wikijs-certificate.yaml
|
|
- zipline/zipline-certificate.yaml
|
|
- vaultwarden/vaultwarden-certificate.yaml
|
|
- databasus/databasus-certificate.yaml
|
|
- excalidraw/excalidraw-certificate.yaml
|
|
- gotify/gotify-certificate.yaml
|
|
- uptime-kuma/uptime-kuma-certificate.yaml
|
|
- ollama/ollama-certificate.yaml
|
|
- openwebui/openwebui-certificate.yaml
|
|
- searxng/searxng-certificate.yaml
|
|
- affine/affine-certificate.yaml
|
|
- pelican/pelican-certificate.yaml
|
|
- pelican/pelican-wings-certificate.yaml
|
|
|
|
patches:
|
|
# Internal gateway patches
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: authentik/authentik-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: argocd/argocd-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: gitea/gitea-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: immich/immich-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: infisical/infisical-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: jenkins/jenkins-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: longhorn/longhorn-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: n8n/n8n-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: netbootxyz/netbootxyz-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: resume/resume-minio-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: resume/resume-minio-webui-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: technitium/technitium-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: technitium/technitium-backup-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: unifi/unifi-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: proxmox/proxmox-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: truenas/truenas-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: monitoring/monitoring-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: bentopdf/bentopdf-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: it-tools/it-tools-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: jellyfin/jellyfin-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: passbolt/passbolt-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: resume/resume-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: wikijs/wikijs-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: zipline/zipline-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: minio-aistor/minio-aistor-api-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: minio-aistor/minio-aistor-console-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: vaultwarden/vaultwarden-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: databasus/databasus-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: excalidraw/excalidraw-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: gotify/gotify-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: uptime-kuma/uptime-kuma-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: ollama/ollama-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: openwebui/openwebui-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: searxng/searxng-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: affine/affine-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: pelican/pelican-gateway-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
path: pelican/pelican-wings-gateway-patch.yaml
|
|
|
|
# Public gateway patches
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: gitea/gitea-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: authentik/authentik-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: bentopdf/bentopdf-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: it-tools/it-tools-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: jellyfin/jellyfin-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: immich/immich-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: passbolt/passbolt-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: resume/resume-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: wikijs/wikijs-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: zipline/zipline-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: excalidraw/excalidraw-gateway-public-patch.yaml
|
|
- target:
|
|
group: gateway.networking.k8s.io
|
|
version: v1
|
|
kind: Gateway
|
|
name: gateway-public
|
|
path: gotify/gotify-gateway-public-patch.yaml
|
|
# Uncomment to expose Grafana publicly — ensure Grafana auth is properly configured first
|
|
# - target:
|
|
# group: gateway.networking.k8s.io
|
|
# version: v1
|
|
# kind: Gateway
|
|
# name: gateway-public
|
|
# path: monitoring/monitoring-grafana-gateway-public-patch.yaml
|