Jeffrey
c1287fa343
Adds the LDAP outpost deployment and routes ports 389 and 636 on gateway-internal to it. 636 is a TLS listener in Terminate mode so cert-manager renews the LDAPS certificate automatically, and both listeners forward to the outpost's plaintext 3389. allowedRoutes.kinds is set explicitly on both listeners: a TCP listener permits no route kinds by default and a TLS listener defaults to TLSRoute, so the TCPRoute would not attach otherwise.
15 lines
281 B
YAML
15 lines
281 B
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: authentik-ldap-tls
|
|
namespace: envoy-gateway
|
|
spec:
|
|
secretName: authentik-ldap-tls
|
|
privateKey:
|
|
rotationPolicy: Always
|
|
issuerRef:
|
|
name: azure-dns
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- ldap.jsme.be
|