cluster

commit 68125c31a619931c676096658b69006e3c11aee0
parent 663a7837d281339ddd29d779856cebc242e8ecf3
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 28 Dec 2024 00:12:13 +0100

Meow

Diffstat:
A
apps/base/authentik/ingress.yaml
 | 
14
++++++++++++++
M
apps/base/authentik/kustomization.yaml
 | 
1
+
M
apps/base/traefik/release.yaml
 | 
10
++++++++--

3 files changed, 23 insertions(+), 2 deletions(-)
diff --git a/apps/base/authentik/ingress.yaml b/apps/base/authentik/ingress.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+    name: authentik-ldap
+    namespace: authentik
+spec:
+    entryPoints:
+        - ldaps
+    routes:
+        - match: HostSNI(`*`)
+          services:
+            - name: ak-outpost-ldap
+              port: 389
diff --git a/apps/base/authentik/kustomization.yaml b/apps/base/authentik/kustomization.yaml
@@ -3,5 +3,6 @@ kind: Kustomization
 namespace: authentik
 resources:
     - repository.yaml
+    - ingress.yaml
     - certificates.yaml
     - release.yaml
diff --git a/apps/base/traefik/release.yaml b/apps/base/traefik/release.yaml
@@ -90,6 +90,12 @@ spec:
                     default: true
                 exposedPort: 29418
                 protocol: TCP
+            ldaps:
+                port: 636
+                expose:
+                    default: true
+                exposedPort: 636
+                protocol: TCP
             # minecraft:
             #   port: 25566
             #   expose:
@@ -129,8 +135,8 @@ spec:
         instanceLabelOverride: traefik
         topologySpreadConstraints:
             - labelSelector:
-                matchLabels:
-                    app.kubernetes.io/name: '{{ template "traefik.name" . }}'
+                  matchLabels:
+                      app.kubernetes.io/name: '{{ template "traefik.name" . }}'
               maxSkew: 1
               topologyKey: kubernetes.io/hostname
               whenUnsatisfiable: ScheduleAnyway