fix(kanidm): add explicit group/kind/weight to TLSRoute refs (#165)

## Summary

- Adds `group: gateway.networking.k8s.io` and `kind: Gateway` to `parentRefs`
- Adds `group: ""`, `kind: Service`, and `weight: 1` to `backendRefs`

## Why

The Gateway API controller defaults these fields when creating/updating TLSRoute objects, so the live state always has them. ArgoCD diffs desired vs live by string comparison, causing the `kanidm` TLSRoute to show permanent OutOfSync. Same root cause as #162 (HTTPRoutes).

Reviewed-on: #165
This commit was merged in pull request #165.
This commit is contained in:
2026-05-25 22:43:52 +10:00
parent ac8b8212bd
commit f403c6b05d
+7 -2
View File
@@ -13,9 +13,14 @@ spec:
- auth.unkin.net - auth.unkin.net
- au.auth.unkin.net - au.auth.unkin.net
parentRefs: parentRefs:
- name: kanidm - group: gateway.networking.k8s.io
kind: Gateway
name: kanidm
sectionName: https-passthrough sectionName: https-passthrough
rules: rules:
- backendRefs: - backendRefs:
- name: kanidm - group: ""
kind: Service
name: kanidm
port: 8443 port: 8443
weight: 1