unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix(gateways): add explicit group/kind/weight to all HTTPRoute refs
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details

Browse Source 
ArgoCD diffs against live state where k8s defaults these fields in:
- parentRefs: group=gateway.networking.k8s.io, kind=Gateway
- backendRefs: group="", kind=Service, weight=1

Matches the pattern from #153 (certificateRefs).
This commit is contained in:
Ben Vincent
2026-05-24 20:30:14 +10:00
parent 6815b66010
commit 9df835dc52
9 changed files with 94 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/base/artifactapi/httproute.yaml
+10 -3
View File
@@ -8,7 +8,9 @@ spec:
hostnames:
- artifactapi.k8s.syd1.au.unkin.net
parentRefs:
- name: artifactapi
- group: gateway.networking.k8s.io
kind: Gateway
name: artifactapi
sectionName: http
rules:
- filters:
@@ -30,12 +32,17 @@ spec:
hostnames:
- artifactapi.k8s.syd1.au.unkin.net
parentRefs:
- name: artifactapi
- group: gateway.networking.k8s.io
kind: Gateway
name: artifactapi
sectionName: https
rules:
- backendRefs:
- name: artifactapi-api
- group: ""
kind: Service
name: artifactapi-api
port: 80
weight: 1
matches:
- path:
type: PathPrefix
apps/base/cattle-system/httproute.yaml
+10 -3
View File
@@ -8,7 +8,9 @@ spec:
hostnames:
- rancher.k8s.syd1.au.unkin.net
parentRefs:
- name: rancher
- group: gateway.networking.k8s.io
kind: Gateway
name: rancher
sectionName: http
rules:
- filters:
@@ -30,12 +32,17 @@ spec:
hostnames:
- rancher.k8s.syd1.au.unkin.net
parentRefs:
- name: rancher
- group: gateway.networking.k8s.io
kind: Gateway
name: rancher
sectionName: https
rules:
- backendRefs:
- name: rancher
- group: ""
kind: Service
name: rancher
port: 80
weight: 1
matches:
- path:
type: PathPrefix
apps/base/consul/httproute.yaml
+17 -5
View File
@@ -11,7 +11,9 @@ spec:
hostnames:
- consul.k8s.syd1.au.unkin.net
parentRefs:
- name: consul
- group: gateway.networking.k8s.io
kind: Gateway
name: consul
sectionName: http
rules:
- filters:
@@ -36,12 +38,17 @@ spec:
hostnames:
- consul.k8s.syd1.au.unkin.net
parentRefs:
- name: consul
- group: gateway.networking.k8s.io
kind: Gateway
name: consul
sectionName: https
rules:
- backendRefs:
- name: consul-ui
- group: ""
kind: Service
name: consul-ui
port: 80
weight: 1
matches:
- path:
type: PathPrefix
@@ -59,12 +66,17 @@ spec:
hostnames:
- consul.service.consul
parentRefs:
- name: consul
- group: gateway.networking.k8s.io
kind: Gateway
name: consul
sectionName: consul-svc
rules:
- backendRefs:
- name: consul-ui
- group: ""
kind: Service
name: consul-ui
port: 80
weight: 1
matches:
- path:
type: PathPrefix
apps/base/kanidm/httproute.yaml
+3 -1
View File
@@ -13,7 +13,9 @@ spec:
- auth.unkin.net
- au.auth.unkin.net
parentRefs:
- name: kanidm
- group: gateway.networking.k8s.io
kind: Gateway
name: kanidm
sectionName: http
rules:
- filters:
apps/base/litellm/httproute.yaml
+10 -3
View File
@@ -8,7 +8,9 @@ spec:
hostnames:
- litellm.k8s.syd1.au.unkin.net
parentRefs:
- name: litellm
- group: gateway.networking.k8s.io
kind: Gateway
name: litellm
sectionName: http
rules:
- filters:
@@ -30,12 +32,17 @@ spec:
hostnames:
- litellm.k8s.syd1.au.unkin.net
parentRefs:
- name: litellm
- group: gateway.networking.k8s.io
kind: Gateway
name: litellm
sectionName: https
rules:
- backendRefs:
- name: litellm
- group: ""
kind: Service
name: litellm
port: 4000
weight: 1
matches:
- path:
type: PathPrefix
apps/base/paperclip/httproute.yaml
+10 -3
View File
@@ -8,7 +8,9 @@ spec:
hostnames:
- paperclip.k8s.syd1.au.unkin.net
parentRefs:
- name: paperclip
- group: gateway.networking.k8s.io
kind: Gateway
name: paperclip
sectionName: http
rules:
- filters:
@@ -30,12 +32,17 @@ spec:
hostnames:
- paperclip.k8s.syd1.au.unkin.net
parentRefs:
- name: paperclip
- group: gateway.networking.k8s.io
kind: Gateway
name: paperclip
sectionName: https
rules:
- backendRefs:
- name: paperclip
- group: ""
kind: Service
name: paperclip
port: 3100
weight: 1
matches:
- path:
type: PathPrefix
apps/base/puppet/httproute_puppetboard.yaml
+10 -3
View File
@@ -13,7 +13,9 @@ spec:
hostnames:
- puppetboard.k8s.syd1.au.unkin.net
parentRefs:
- name: puppetboard
- group: gateway.networking.k8s.io
kind: Gateway
name: puppetboard
sectionName: http
rules:
- filters:
@@ -40,12 +42,17 @@ spec:
hostnames:
- puppetboard.k8s.syd1.au.unkin.net
parentRefs:
- name: puppetboard
- group: gateway.networking.k8s.io
kind: Gateway
name: puppetboard
sectionName: https
rules:
- backendRefs:
- name: puppetboard
- group: ""
kind: Service
name: puppetboard
port: 80
weight: 1
matches:
- path:
type: PathPrefix
apps/base/puppet/httproute_puppetdb.yaml
+7 -2
View File
@@ -13,12 +13,17 @@ spec:
hostnames:
- puppetdb.k8s.syd1.au.unkin.net
parentRefs:
- name: puppetdb
- group: gateway.networking.k8s.io
kind: Gateway
name: puppetdb
sectionName: https
rules:
- backendRefs:
- name: puppetdb
- group: ""
kind: Service
name: puppetdb
port: 8080
weight: 1
matches:
- path:
type: PathPrefix
apps/base/vault/httproute.yaml
+17 -5
View File
@@ -11,7 +11,9 @@ spec:
hostnames:
- vault.k8s.syd1.au.unkin.net
parentRefs:
- name: vault
- group: gateway.networking.k8s.io
kind: Gateway
name: vault
sectionName: http
rules:
- filters:
@@ -36,12 +38,17 @@ spec:
hostnames:
- vault.k8s.syd1.au.unkin.net
parentRefs:
- name: vault
- group: gateway.networking.k8s.io
kind: Gateway
name: vault
sectionName: https
rules:
- backendRefs:
- name: vault
- group: ""
kind: Service
name: vault
port: 8200
weight: 1
matches:
- path:
type: PathPrefix
@@ -60,12 +67,17 @@ spec:
- vault.service.consul
- vault.query.consul
parentRefs:
- name: vault
- group: gateway.networking.k8s.io
kind: Gateway
name: vault
sectionName: vault-direct
rules:
- backendRefs:
- name: vault
- group: ""
kind: Service
name: vault
port: 8200
weight: 1
matches:
- path:
type: PathPrefix