Add identity.k8s.syd1.au.unkin.net as internal hostname for Authentik

2026-06-28 12:11:50 +10:00
parent d33c2b649f
commit 1b9b8cb033
2 changed files with 31 additions and 1 deletions
@@ -8,7 +8,7 @@ metadata:
    cert-manager.io/cluster-issuer: vault-issuer
    cert-manager.io/common-name: identity.unkin.net
    cert-manager.io/private-key-size: "4096"
-    external-dns.alpha.kubernetes.io/hostname: identity.unkin.net
+    external-dns.alpha.kubernetes.io/hostname: identity.unkin.net,identity.k8s.syd1.au.unkin.net
    external-dns.alpha.kubernetes.io/target: 198.18.200.4
  name: authentik
  namespace: authentik
@@ -35,3 +35,23 @@ spec:
            kind: Secret
            name: authentik-tls
        mode: Terminate
+    - allowedRoutes:
+        namespaces:
+          from: Same
+      hostname: identity.k8s.syd1.au.unkin.net
+      name: http-internal
+      port: 80
+      protocol: HTTP
+    - allowedRoutes:
+        namespaces:
+          from: Same
+      hostname: identity.k8s.syd1.au.unkin.net
+      name: https-internal
+      port: 443
+      protocol: HTTPS
+      tls:
+        certificateRefs:
+          - group: ""
+            kind: Secret
+            name: authentik-tls
+        mode: Terminate