unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

traefik-internal: add ldaps :636 entrypoint for authentik LDAPS #345

Merged
unkinben merged 1 commits from benvin/traefik-ldaps-entrypoint into main 2026-08-08 23:19:19 +10:00
Conversation 0 Commits 1 Files Changed 1
+6

1 Commits

Author SHA1 Message Date
Ben Vincent ef4f5f68a0 traefik-internal: add ldaps :636 entrypoint for authentik LDAPS
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
Why:
- traefik-internal has no 636 entrypoint, so the authentik-ldap Gateway's
  636/TLS passthrough listeners are invalid and the whole Gateway is
  rejected (Accepted: False), taking LDAPS down.
- The traefik-internal LoadBalancer only publishes 80/443, so nothing
  reaches the Authentik LDAP outpost on 636.

How:
- Add an `ldaps` entrypoint on :636 (raw TCP, no TLS termination) to the
  traefik-internal helm values so 636/TLS passthrough streams pass through
  to the LDAP outpost.
- Expose 636 on the traefik-internal LoadBalancer via the port's
  `expose.default`, keeping the pinned 198.18.200.4 / common group.
 2026-08-08 23:16:50 +10:00