commit 00452374ccbce3805ffc2d655bc720feacee422a parent bb26aa126dcbb606662b1c286907c2113fb25cf7 Author: MTRNord <MTRNord@users.noreply.github.com> Date: Mon, 4 Aug 2025 18:12:05 +0200 Migrate plane Diffstat:
| M | apps/talos_cluster/envoy-gateway/gateway_settings.yaml | | | 60 | ++++++++++++++++++++++++++++++------------------------------ |
| M | apps/talos_cluster/namespaces/plane.yaml | | | 4 | ---- |
2 files changed, 30 insertions(+), 34 deletions(-)
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml @@ -351,36 +351,36 @@ spec: certificateRefs: - kind: Secret name: rspamd.midnightthoughts.space-tls - # - name: https-midnightthoughts-capacitor - # protocol: HTTPS - # hostname: "ui.k8s.midnightthoughts.space" - # port: 443 - # allowedRoutes: - # namespaces: - # from: "All" - # tls: - # mode: Terminate - # certificateRefs: - # - kind: Secret - # name: ui.k8s.midnightthoughts.space-tls - # - name: https-midnightthoughts-plane - # protocol: HTTPS - # hostname: "plane.midnightthoughts.space" - # port: 443 - # allowedRoutes: - # namespaces: - # from: "All" - # tls: - # mode: Terminate - # certificateRefs: - # - kind: Secret - # name: plane.midnightthoughts.space - # - name: http - # protocol: HTTP - # port: 80 - # allowedRoutes: - # namespaces: - # from: "All" + - name: https-midnightthoughts-plane + protocol: HTTPS + hostname: "plane.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: plane.midnightthoughts.space + - name: http + protocol: HTTP + port: 80 + allowedRoutes: + namespaces: + from: "All" + # - name: https-midnightthoughts-capacitor + # protocol: HTTPS + # hostname: "ui.k8s.midnightthoughts.space" + # port: 443 + # allowedRoutes: + # namespaces: + # from: "All" + # tls: + # mode: Terminate + # certificateRefs: + # - kind: Secret + # name: ui.k8s.midnightthoughts.space-tls --- apiVersion: gateway.envoyproxy.io/v1alpha1 kind: ClientTrafficPolicy diff --git a/apps/talos_cluster/namespaces/plane.yaml b/apps/talos_cluster/namespaces/plane.yaml @@ -2,7 +2,3 @@ apiVersion: v1 kind: Namespace metadata: name: plane - labels: - pod-security.kubernetes.io/audit: privileged - pod-security.kubernetes.io/enforce: privileged - pod-security.kubernetes.io/warn: privileged