commit 9f3c01aa47505476ffc023c8038de8f75b194ec5 parent b77c0e051ced4ceb59551422ece681df04fcddf2 Author: MTRNord <mtrnord1@gmail.com> Date: Wed, 19 Mar 2025 12:33:19 +0100 Migrate flux webhook to httproute Diffstat:
| M | apps/base/envoy-gateway/release.yaml | | | 12 | ++++++++++++ |
| M | clusters/2024_cluster/flux-system/webhook-ingress.yaml | | | 33 | +++++++++++++-------------------- |
2 files changed, 25 insertions(+), 20 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -310,6 +310,18 @@ spec: certificateRefs: - kind: Secret name: status.midnightthoughts.space-tls + - name: https-midnightthoughts-webhook-kubernetes + protocol: HTTPS + hostname: "webhook.kubernetes.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: webhook.kubernetes.midnightthoughts.space-tls - name: https-nordgedanken-root protocol: HTTPS hostname: "nordgedanken.dev" diff --git a/clusters/2024_cluster/flux-system/webhook-ingress.yaml b/clusters/2024_cluster/flux-system/webhook-ingress.yaml @@ -1,25 +1,18 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute metadata: name: webhook-ingress namespace: flux-system - labels: - name: webhook-ingress - annotations: - cert-manager.io/cluster-issuer: letsencrypt-dns spec: + parentRefs: + - name: envoy-gateway + namespace: envoy-gateway + hostnames: + - webhook.kubernetes.midnightthoughts.space rules: - - host: webhook.kubernetes.midnightthoughts.space - http: - paths: - - pathType: Prefix - path: "/" - backend: - service: - name: webhook-receiver - port: - number: 80 - tls: - - secretName: webhook.kubernetes.midnightthoughts.space-tls - hosts: - - webhook.kubernetes.midnightthoughts.space + - backendRefs: + - name: webhook-receiver + port: 80 + timeouts: + request: 240s + backendRequest: 0s