commit 6b1488258ba3059ae521332866158e342314240e
parent cbe955dc2dd98ed82990b0c4bdabc45ba4517684
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Mon, 4 Aug 2025 15:03:09 +0200
Migrate connectivity-tester
Diffstat:
4 files changed, 438 insertions(+), 380 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -75,42 +75,42 @@ spec:
protocol: TCP
port: 25
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submissions
protocol: TCP
port: 465
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submission
protocol: TCP
port: 587
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imap
protocol: TCP
port: 143
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imaps
protocol: TCP
port: 993
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
@@ -159,25 +159,25 @@ spec:
hostname: "docuseal.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: docuseal.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: docuseal.midnightthoughts.space-tls
- name: https-midnightthoughts-neoboard
protocol: HTTPS
hostname: "miro-export.neoboard.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: miro-export.neoboard.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: miro-export.neoboard.midnightthoughts.space-tls
# - name: https-midnightthoughts-certs
# protocol: HTTPS
# hostname: "certs.midnightthoughts.space"
@@ -255,13 +255,13 @@ spec:
hostname: "bugzilla.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: bugzilla.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: bugzilla.midnightthoughts.space-tls
# - name: https-midnightthoughts-root
# protocol: HTTPS
# hostname: "midnightthoughts.space"
@@ -303,13 +303,13 @@ spec:
hostname: "rspamd.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rspamd.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rspamd.midnightthoughts.space-tls
# - name: https-midnightthoughts-grafana
# protocol: HTTPS
# hostname: "grafana.midnightthoughts.space"
@@ -327,13 +327,13 @@ spec:
hostname: "osticket.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: osticket.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: osticket.midnightthoughts.space-tls
# - name: https-midnightthoughts-vault
# protocol: HTTPS
# hostname: "vault.midnightthoughts.space"
@@ -351,13 +351,13 @@ spec:
hostname: "rook.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rook.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rook.midnightthoughts.space-tls
# - name: https-midnightthoughts-jenkins
# protocol: HTTPS
# hostname: "jenkins.midnightthoughts.space"
@@ -423,13 +423,13 @@ spec:
hostname: "plane.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: plane.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: plane.midnightthoughts.space
# - name: https-midnightthoughts-irc
# protocol: HTTPS
# hostname: "irc.midnightthoughts.space"
@@ -507,13 +507,13 @@ spec:
hostname: "matrix.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.mtrnord.blog-tls
# - name: https-mtrnord-blog-hubzilla
# protocol: HTTPS
# hostname: "hub.mtrnord.blog"
@@ -531,13 +531,13 @@ spec:
hostname: "mastodon.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: mastodon.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: mastodon.mtrnord.blog-tls
# - name: https-api-connectivity-tester-mtrnord-blog
# protocol: HTTPS
# hostname: "api.connectivity-tester.mtrnord.blog"
@@ -591,55 +591,55 @@ spec:
hostname: "notify.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: notify.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: notify.mtrnord.blog-tls
- name: https-rss-mtrnord-blog
protocol: HTTPS
hostname: "rss.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: rss.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: rss.mtrnord.blog-tls
- name: http
protocol: HTTP
port: 80
allowedRoutes:
- namespaces:
- from: "All"
- # - name: ldap
- # protocol: TCP
- # port: 389
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: gerrit-ssh
- # protocol: TCP
- # port: 29418
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: ircs
- # protocol: TCP
- # port: 6697
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
+ namespaces:
+ from: "All"
+ # - name: ldap
+ # protocol: TCP
+ # port: 389
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: gerrit-ssh
+ # protocol: TCP
+ # port: 29418
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: ircs
+ # protocol: TCP
+ # port: 6697
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
diff --git a/apps/talos_cluster/connectivity-tester/connectivity_tester.yaml b/apps/talos_cluster/connectivity-tester/connectivity_tester.yaml
@@ -0,0 +1,57 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ name: connectivity-tester-stage-config
+ namespace: matrix
+type: Opaque
+stringData:
+ config.yaml: ENC[AES256_GCM,data:9+xUlhm/W1QceUci8tOYmdnYtMhy0elcedXnlCwYOzQ9TpnnmS44FRKlITGqFoUUWmFwA09L7TJn8t0CVbFj1/2OP9btAHmcXhkgrCpmWrSiI6fPFdlFIXI0UTBuJZfC3lC6IB8rNym+1f+5UukARIGKRGBIYtuThYXETrY5lTYTsJ5qovoa8i9HP58T2UVLQc6ZCREElJDnyZC27J5tQ2kavtdYwoxtQUYJxAqHGWW61fw41qSfzW2MRAcrWnZ9D8R/CvC1c5FuqonDkE730kvk1HH/tMC18iMS1lWYtpM1zgaLLnA88vo4Y1UQkF/5N+wgp7NlfCdzaKt0qJ9vNXng82pRF2phjfgTiFjhC7aMCa9tKp12VMJyI41nSw7ytFbJ4wznvaMp1A38Og8DYmT4O7Bky4pFbQ9vXJ4VrHjvUmA0BhCtZRcPlcSdedznOj8LPLSeqfaLIJZ8nWgHElE5Cvrc/mB16qCUDSlkIxRDxGEw1tBcRIjBHO2XcDxDagLqRfxkOZ16a9iCvYq5vCMZp7SqwmJL/mc5cbkaP9+MnSY9lriE6ctBddQNcLW90BmHcf5RuDoNmBRSy1wG78HIHTSwzvpZjfZ4AXMf4mkGhohIBPVu0tCTrYpSdMrV88icIqgXNpKpYmpxYxA5/daMlY9eyx5lzrI+I3ZZ5UaUQZEGNRl0yqZp7q6/HcMD6M2rNIV9K4fmmRLV0hLJ+QOqtSmB587SCBzcxUiEYQ==,iv:uZLfSDlS9dVAjn48smAhix9cXEJMydEaNCKMZ+OvW+c=,tag:wbaGGomRoE+/IHKWtNueXA==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxT1FaNGpTTFd3bmJwRUNj
+ VlQxOHh6U2JEWU9yQ2VOK25yMGwycUV2aDBvCmpxVXZPbUZ0UTdNTWtPUnkrZGhC
+ MW1vOWVtZGVxZzRyaG9EWWpPdk5EV0EKLS0tIGp5STZNUUg0bFRHc29KbitKVk42
+ WlkyVk94U1NHeER5T2NEM0w4MmgzM3cKEB5CAlKIELESDvGA9iX8QyIUuDYJ5ekz
+ POqNU/+I6V9t5CdaR2C3uZOTCHcWecUT4CQwibrXHgsGiRW1Aqx1ag==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-07-25T14:11:31Z"
+ mac: ENC[AES256_GCM,data:Rg/LIpK9muWCpEeMAvpIWeunc56446AE/pch871aIFtI5aSpp6r0GB3xnJJbt5lzCVW7saX+8cMGrGr5DfnwdUVNM8ciXF+wieFULpnt8lixBG31QjTpcrCHQoZNvLPERdk5bvb53cnCgjXq6vZZ7B0WbX6MKCUWIvBMgcbzWIM=,iv:SIAf0GMEpCMMZ0PZXveTOYWFpECKpUn/VcXeFkjQbzY=,tag:H6Lpo6WjCo0PdVcISJgw8A==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ name: connectivity-tester-config
+ namespace: matrix
+type: Opaque
+stringData:
+ config.yaml: ENC[AES256_GCM,data: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,iv:lIHWP/z0g2WPtlwGLw5rp6OhX6pNtMTM3VkgfKlvRGw=,tag:EUNFJv6Q6BEfgX/e0QAR/g==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxT1FaNGpTTFd3bmJwRUNj
+ VlQxOHh6U2JEWU9yQ2VOK25yMGwycUV2aDBvCmpxVXZPbUZ0UTdNTWtPUnkrZGhC
+ MW1vOWVtZGVxZzRyaG9EWWpPdk5EV0EKLS0tIGp5STZNUUg0bFRHc29KbitKVk42
+ WlkyVk94U1NHeER5T2NEM0w4MmgzM3cKEB5CAlKIELESDvGA9iX8QyIUuDYJ5ekz
+ POqNU/+I6V9t5CdaR2C3uZOTCHcWecUT4CQwibrXHgsGiRW1Aqx1ag==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-07-25T14:11:31Z"
+ mac: ENC[AES256_GCM,data:Rg/LIpK9muWCpEeMAvpIWeunc56446AE/pch871aIFtI5aSpp6r0GB3xnJJbt5lzCVW7saX+8cMGrGr5DfnwdUVNM8ciXF+wieFULpnt8lixBG31QjTpcrCHQoZNvLPERdk5bvb53cnCgjXq6vZZ7B0WbX6MKCUWIvBMgcbzWIM=,iv:SIAf0GMEpCMMZ0PZXveTOYWFpECKpUn/VcXeFkjQbzY=,tag:H6Lpo6WjCo0PdVcISJgw8A==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
diff --git a/apps/talos_cluster/connectivity-tester/kustomization.yaml b/apps/talos_cluster/connectivity-tester/kustomization.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: matrix
resources:
+ - connectivity-tester.yaml
- staging_deployment.yaml
- deployment.yaml
- service.yaml
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml
@@ -48,42 +48,42 @@ spec:
protocol: TCP
port: 25
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submissions
protocol: TCP
port: 465
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: submission
protocol: TCP
port: 587
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imap
protocol: TCP
port: 143
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: imaps
protocol: TCP
port: 993
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
@@ -108,343 +108,343 @@ spec:
hostname: "talos.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: talos.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: talos.midnightthoughts.space-tls
- name: https-midnightthoughts-auth
protocol: HTTPS
hostname: "auth.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: auth.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: auth.midnightthoughts.space-tls
- name: https-midnightthoughts-grafana
protocol: HTTPS
hostname: "grafana.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: grafana.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: grafana.midnightthoughts.space-tls
- name: https-draupnir-midnightthoughts
protocol: HTTPS
hostname: "draupnir.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: draupnir.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: draupnir.midnightthoughts.space-tls
- name: https-matrix-draupnir-midnightthoughts
protocol: HTTPS
hostname: "matrix.draupnir.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: matrix.draupnir.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: matrix.draupnir.midnightthoughts.space-tls
- name: https-midnightthoughts-vault
protocol: HTTPS
hostname: "vault.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: vault.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: vault.midnightthoughts.space-tls
- name: https-midnightthoughts-budget
protocol: HTTPS
hostname: "budget.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: budget.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: budget.midnightthoughts.space-tls
- name: https-midnightthoughts-ldap
protocol: HTTPS
hostname: "ldap.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: ldap.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: ldap.midnightthoughts.space-tls
- name: ldap
protocol: TCP
port: 389
allowedRoutes:
- kinds:
- - kind: TCPRoute
- namespaces:
- from: All
+ kinds:
+ - kind: TCPRoute
+ namespaces:
+ from: All
- name: https-mtrnord-blog-gts
protocol: HTTPS
hostname: "gts.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: gts.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: gts.mtrnord.blog-tls
- name: https-midnightthoughts-collabora
protocol: HTTPS
hostname: "collabora.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: collabora.midnightthoughts.space
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: collabora.midnightthoughts.space
- name: https-midnightthoughts-webhook-kubernetes
protocol: HTTPS
hostname: "webhook.kubernetes.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: webhook.kubernetes.midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: webhook.kubernetes.midnightthoughts.space-tls
- name: https-api-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "api.connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: api.connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: api.connectivity-tester.mtrnord.blog-tls
- name: https-stage-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "stage.connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: stage.connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: stage.connectivity-tester.mtrnord.blog-tls
- name: https-connectivity-tester-mtrnord-blog
protocol: HTTPS
hostname: "connectivity-tester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: connectivity-tester.mtrnord.blog-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: connectivity-tester.mtrnord.blog-tls
- name: https-federationtester-mtrnord-blog
protocol: HTTPS
hostname: "federationtester.mtrnord.blog"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: federationtester.mtrnord.blog-tls
- # - name: https-docuseal-midnightthoughts
- # protocol: HTTPS
- # hostname: "docuseal.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: docuseal.midnightthoughts.space-tls
- # - name: https-midnightthoughts-neoboard
- # protocol: HTTPS
- # hostname: "miro-export.neoboard.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: miro-export.neoboard.midnightthoughts.space-tls
- # - name: https-midnightthoughts-certs
- # protocol: HTTPS
- # hostname: "certs.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: certs.midnightthoughts.space-tls
- # - name: https-midnightthoughts-capacitor
- # protocol: HTTPS
- # hostname: "ui.k8s.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: ui.k8s.midnightthoughts.space-tls
- # - name: https-midnightthoughts-rspamd
- # protocol: HTTPS
- # hostname: "rspamd.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: rspamd.midnightthoughts.space-tls
- # - name: https-midnightthoughts-osticket
- # protocol: HTTPS
- # hostname: "osticket.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: osticket.midnightthoughts.space-tls
- # - name: https-midnightthoughts-plane
- # protocol: HTTPS
- # hostname: "plane.midnightthoughts.space"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: plane.midnightthoughts.space
- # - name: https-mtrnord-blog-root
- # protocol: HTTPS
- # hostname: "mtrnord.blog"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: mtrnord.blog-tls
- # - name: https-mtrnord-blog-matrix
- # protocol: HTTPS
- # hostname: "matrix.mtrnord.blog"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: matrix.mtrnord.blog-tls
- # - name: https-notify-mtrnord-blog
- # protocol: HTTPS
- # hostname: "notify.mtrnord.blog"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: notify.mtrnord.blog-tls
- # - name: https-rss-mtrnord-blog
- # protocol: HTTPS
- # hostname: "rss.mtrnord.blog"
- # port: 443
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # tls:
- # mode: Terminate
- # certificateRefs:
- # - kind: Secret
- # name: rss.mtrnord.blog-tls
- # - name: http
- # protocol: HTTP
- # port: 80
- # allowedRoutes:
- # namespaces:
- # from: "All"
- # - name: gerrit-ssh
- # protocol: TCP
- # port: 29418
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
- # - name: ircs
- # protocol: TCP
- # port: 6697
- # allowedRoutes:
- # kinds:
- # - kind: TCPRoute
- # namespaces:
- # from: All
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: federationtester.mtrnord.blog-tls
+ # - name: https-docuseal-midnightthoughts
+ # protocol: HTTPS
+ # hostname: "docuseal.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: docuseal.midnightthoughts.space-tls
+ # - name: https-midnightthoughts-neoboard
+ # protocol: HTTPS
+ # hostname: "miro-export.neoboard.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: miro-export.neoboard.midnightthoughts.space-tls
+ # - name: https-midnightthoughts-certs
+ # protocol: HTTPS
+ # hostname: "certs.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: certs.midnightthoughts.space-tls
+ # - name: https-midnightthoughts-capacitor
+ # protocol: HTTPS
+ # hostname: "ui.k8s.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: ui.k8s.midnightthoughts.space-tls
+ # - name: https-midnightthoughts-rspamd
+ # protocol: HTTPS
+ # hostname: "rspamd.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: rspamd.midnightthoughts.space-tls
+ # - name: https-midnightthoughts-osticket
+ # protocol: HTTPS
+ # hostname: "osticket.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: osticket.midnightthoughts.space-tls
+ # - name: https-midnightthoughts-plane
+ # protocol: HTTPS
+ # hostname: "plane.midnightthoughts.space"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: plane.midnightthoughts.space
+ # - name: https-mtrnord-blog-root
+ # protocol: HTTPS
+ # hostname: "mtrnord.blog"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: mtrnord.blog-tls
+ # - name: https-mtrnord-blog-matrix
+ # protocol: HTTPS
+ # hostname: "matrix.mtrnord.blog"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: matrix.mtrnord.blog-tls
+ # - name: https-notify-mtrnord-blog
+ # protocol: HTTPS
+ # hostname: "notify.mtrnord.blog"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: notify.mtrnord.blog-tls
+ # - name: https-rss-mtrnord-blog
+ # protocol: HTTPS
+ # hostname: "rss.mtrnord.blog"
+ # port: 443
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # tls:
+ # mode: Terminate
+ # certificateRefs:
+ # - kind: Secret
+ # name: rss.mtrnord.blog-tls
+ # - name: http
+ # protocol: HTTP
+ # port: 80
+ # allowedRoutes:
+ # namespaces:
+ # from: "All"
+ # - name: gerrit-ssh
+ # protocol: TCP
+ # port: 29418
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
+ # - name: ircs
+ # protocol: TCP
+ # port: 6697
+ # allowedRoutes:
+ # kinds:
+ # - kind: TCPRoute
+ # namespaces:
+ # from: All
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
