commit d27fb18038cd9ba748006f0a13a769ca144fc440 parent fc1ca27bd4fcda767b5043375535587a2eb967c3 Author: MTRNord <mtrnord1@gmail.com> Date: Wed, 19 Mar 2025 14:52:18 +0100 Migrate rook to HTTPRoute Diffstat:
| M | apps/base/envoy-gateway/release.yaml | | | 12 | ++++++++++++ |
| M | infrastructure/controllers/rook.yaml | | | 21 | ++++++++++++++++++++- |
2 files changed, 32 insertions(+), 1 deletion(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -370,6 +370,18 @@ spec: certificateRefs: - kind: Secret name: vault.midnightthoughts.space-tls + - name: https-midnightthoughts-rook + protocol: HTTPS + hostname: "rook.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: rook.midnightthoughts.space-tls - name: https-nordgedanken-root protocol: HTTPS hostname: "nordgedanken.dev" diff --git a/infrastructure/controllers/rook.yaml b/infrastructure/controllers/rook.yaml @@ -94,7 +94,7 @@ spec: ssl: false ingress: dashboard: - enabled: true + enabled: false annotations: cert-manager.io/cluster-issuer: letsencrypt-dns external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space @@ -132,3 +132,22 @@ spec: reclaimPolicy: Delete allowVolumeExpansion: true volumeBindingMode: Immediate +--- +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute +metadata: + name: rook-ceph-dashboard + namespace: rook-ceph +spec: + parentRefs: + - name: envoy-gateway + namespace: envoy-gateway + hostnames: + - rook.midnightthoughts.space + rules: + - backendRefs: + - name: rook-ceph-mgr-dashboard + port: 7000 + timeouts: + request: 240s + backendRequest: 0s