mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
1f04831a97
ingress-nginx is gone and every app is served by the Envoy Gateway. The certificates were created by cert-manager's ingress-shim and are owned by the Ingresses, so each app now declares its Certificate itself, with the same name, secret and usages, so nothing gets reissued. gateway-shim can't take over because the certificates live in the app namespaces. immich drops mbg.hensen.io, which has no route, so that one certificate is reissued through the Gateway's HTTP-01 solver. Also removes the Longhorn test-port redirect URI and updates comments that still described nginx.
31 lines
679 B
YAML
31 lines
679 B
YAML
# Home Assistant runs outside the cluster on 192.168.1.202. An ExternalName
|
|
# Service needs a DNS name, not a bare IP, so point a selector-less Service
|
|
# at it with a hand-written EndpointSlice.
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: home-assistant-external
|
|
spec:
|
|
ports:
|
|
- name: http
|
|
port: 8123
|
|
protocol: TCP
|
|
targetPort: 8123
|
|
---
|
|
apiVersion: discovery.k8s.io/v1
|
|
kind: EndpointSlice
|
|
metadata:
|
|
name: home-assistant-external-1
|
|
labels:
|
|
kubernetes.io/service-name: home-assistant-external
|
|
addressType: IPv4
|
|
ports:
|
|
- name: http
|
|
port: 8123
|
|
protocol: TCP
|
|
endpoints:
|
|
- addresses:
|
|
- 192.168.1.202
|
|
conditions:
|
|
ready: true
|