unkinben
f403c6b05d
## Summary - Adds `group: gateway.networking.k8s.io` and `kind: Gateway` to `parentRefs` - Adds `group: ""`, `kind: Service`, and `weight: 1` to `backendRefs` ## Why The Gateway API controller defaults these fields when creating/updating TLSRoute objects, so the live state always has them. ArgoCD diffs desired vs live by string comparison, causing the `kanidm` TLSRoute to show permanent OutOfSync. Same root cause as #162 (HTTPRoutes). Reviewed-on: #165
27 lines
553 B
YAML
27 lines
553 B
YAML
---
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: TLSRoute
|
|
metadata:
|
|
name: kanidm
|
|
namespace: kanidm
|
|
labels:
|
|
app.kubernetes.io/name: kanidm
|
|
app.kubernetes.io/instance: kanidm
|
|
spec:
|
|
hostnames:
|
|
- kanidm.k8s.syd1.au.unkin.net
|
|
- auth.unkin.net
|
|
- au.auth.unkin.net
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: kanidm
|
|
sectionName: https-passthrough
|
|
rules:
|
|
- backendRefs:
|
|
- group: ""
|
|
kind: Service
|
|
name: kanidm
|
|
port: 8443
|
|
weight: 1
|