Niklas Ye
dcb2a86f9a
Release / test (push) Failing after 7s
Release / build (amd64, darwin) (push) Has been skipped
Release / build (amd64, linux) (push) Has been skipped
Release / build (arm64, darwin) (push) Has been skipped
Release / build (arm64, linux) (push) Has been skipped
Release / docker (push) Has been skipped
Release / chart (push) Has been skipped
Release / release (push) Has been skipped
The route carried no sectionName, so it attached to every listener whose hostname matched — including the hostname-less plaintext HTTP listener. On a publicly reachable hostname that means the API accepts bearer tokens over cleartext. networking.listener names the listener to bind to. It defaults to empty, which keeps the previous attach-to-all behaviour. Also document the Kubernetes install path, which the README omitted.
19 lines
455 B
YAML
19 lines
455 B
YAML
---
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: {{ .Release.Name }}
|
|
spec:
|
|
hostnames:
|
|
- {{ .Values.networking.hostname | quote }}
|
|
parentRefs:
|
|
- name: envoy-main
|
|
namespace: envoy-gateway-system
|
|
{{- with .Values.networking.listener }}
|
|
sectionName: {{ . | quote }}
|
|
{{- end }}
|
|
rules:
|
|
- backendRefs:
|
|
- name: {{ include "terdut-server.fullname" . }}
|
|
port: {{ .Values.networking.servicePort }}
|