fix: add peerCertURI config to k8s crd provider

Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>

pkg/provider/kubernetes/crd/fixtures/with_servers_transport.yml

@@ -94,17 +94,18 @@ spec:
   insecureSkipVerify: true
   maxIdleConnsPerHost: 42
   disableHTTP2: true
+  peerCertURI: foo://bar
   rootCAsSecrets:
-  - root-ca0
-  - root-ca1
-  - root-ca2
-  - root-ca3
-  - root-ca4
-  - allcerts
+    - root-ca0
+    - root-ca1
+    - root-ca2
+    - root-ca3
+    - root-ca4
+    - allcerts
   certificatesSecrets:
-  - mtls1
-  - mtls2
-  - allcerts
+    - mtls1
+    - mtls2
+    - allcerts
   forwardingTimeouts:
     dialTimeout: 42
     responseHeaderTimeout: 42s

pkg/provider/kubernetes/crd/kubernetes.go

@@ -348,6 +348,7 @@ func (p *Provider) loadConfigurationFromCRD(ctx context.Context, client Client)
 			DisableHTTP2:        serversTransport.Spec.DisableHTTP2,
 			MaxIdleConnsPerHost: serversTransport.Spec.MaxIdleConnsPerHost,
 			ForwardingTimeouts:  forwardingTimeout,
+			PeerCertURI:         serversTransport.Spec.PeerCertURI,
 		}
 	}
 

pkg/provider/kubernetes/crd/kubernetes_test.go

@@ -3516,6 +3516,7 @@ func TestLoadIngressRoutes(t *testing.T) {
 								ResponseHeaderTimeout: types.Duration(42 * time.Second),
 								IdleConnTimeout:       types.Duration(42 * time.Millisecond),
 							},
+							PeerCertURI: "foo://bar",
 						},
 						"default-test": {
 							ServerName: "test",
@@ -3627,6 +3628,7 @@ func TestLoadIngressRoutes(t *testing.T) {
 								IdleConnTimeout:       types.Duration(42 * time.Millisecond),
 							},
 							DisableHTTP2: true,
+							PeerCertURI:  "foo://bar",
 						},
 						"default-test": {
 							ServerName: "test",