mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
96c13c63f7
A Gateway listener with its own certificate, the authentik route on both hostnames, and an authentik brand for auth.scoutingmbg.nl that logs in through Scouts Online and then sends people to the photos. The authentik.rubenhensen.nl brand stays as it is.
42 lines
983 B
YAML
42 lines
983 B
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: authentik
|
|
spec:
|
|
parentRefs:
|
|
- name: homelab
|
|
namespace: envoy-gateway-system
|
|
sectionName: https-authentik
|
|
- name: homelab
|
|
namespace: envoy-gateway-system
|
|
sectionName: https-auth-scoutingmbg
|
|
hostnames:
|
|
- authentik.rubenhensen.nl
|
|
- auth.scoutingmbg.nl
|
|
rules:
|
|
- backendRefs:
|
|
- name: authentik-server
|
|
port: 80
|
|
# No limit on the whole request, as with nginx. Envoy's default of 15s
|
|
# cuts off uploads and long-lived connections.
|
|
timeouts:
|
|
request: 0s
|
|
---
|
|
# Lets the Gateway serve the certificate cert-manager keeps in this namespace.
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: ReferenceGrant
|
|
metadata:
|
|
name: gateway-tls
|
|
spec:
|
|
from:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
namespace: envoy-gateway-system
|
|
to:
|
|
- group: ""
|
|
kind: Secret
|
|
name: authentik-tls
|
|
- group: ""
|
|
kind: Secret
|
|
name: auth-scoutingmbg-tls
|