171 lines
4.5 KiB
YAML
171 lines
4.5 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: supersecret
|
|
namespace: default
|
|
|
|
data:
|
|
tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJxRENDQVU2Z0F3SUJBZ0lVWU9zcjBRZ0hPQnE0a1lSQ0w1K1REZFZ0NmJRd0NnWUlLb1pJemowRUF3SXcKRmpFVU1CSUdBMVVFQXd3TFpYaGhiWEJzWlM1amIyMHdIaGNOTWpVeE1ERXdNRGN4TnpNd1doY05NelV4TURBNApNRGN4TnpNd1dqQVdNUlF3RWdZRFZRUUREQXRsZUdGdGNHeGxMbU52YlRCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJET3JpdzNaUTd3SWhXcmJQUzZKRlFUM2JUb05DRjAwdlNWNWZhYjZUYlh5TDh0bHNHcmUKVFJJRjJFd2dzdGVNT2t4R0tLU2xEdnVhRHdxOHAvcVYrMHVqZWpCNE1CMEdBMVVkRGdRV0JCUk1Fa3VleFhRaApVdERnUmcxS0J2NzJDRHErRXpBZkJnTlZIU01FR0RBV2dCUk1Fa3VleFhRaFV0RGdSZzFLQnY3MkNEcStFekFQCkJnTlZIUk1CQWY4RUJUQURBUUgvTUNVR0ExVWRFUVFlTUJ5Q0MyVjRZVzF3YkdVdVkyOXRnZzBxTG1WNFlXMXcKYkdVdVkyOXRNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJUURzODdWazBzd0E2SGdPSmpST3llMW14RDgzcWNHeQpwZUZnb3hWOTNEeStjd0lnVjBNTUVKSmJWc1R5WkszRVErK1hjNXJFTDc4bnJKK1lJRVYrckNVV2o1VT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQ==
|
|
tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JR0hBZ0VBTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEJHMHdhd0lCQVFRZ253Z0w1RFk0VUIxNHNNNmYKRGlrUWR0cWgyUVcxQXJmRjRmYzFVRnppZmRHaFJBTkNBQVF6cTRzTjJVTzhDSVZxMnowdWlSVUU5MjA2RFFoZApOTDBsZVgybStrMjE4aS9MWmJCcTNrMFNCZGhNSUxMWGpEcE1SaWlrcFE3N21nOEt2S2Y2bGZ0TAotLS0tLUVORCBQUklWQVRFIEtFWS0tLS0t
|
|
|
|
---
|
|
kind: GatewayClass
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
metadata:
|
|
name: my-gateway-class
|
|
spec:
|
|
controllerName: traefik.io/gateway-controller
|
|
|
|
---
|
|
kind: Gateway
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
metadata:
|
|
name: my-gateway
|
|
namespace: default
|
|
spec:
|
|
gatewayClassName: my-gateway-class
|
|
listeners: # Use GatewayClass defaults for listener definition.
|
|
- name: http
|
|
protocol: HTTP
|
|
port: 9080
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: HTTPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: https
|
|
protocol: HTTPS
|
|
port: 9443
|
|
tls:
|
|
certificateRefs:
|
|
- kind: Secret
|
|
name: supersecret
|
|
group: ""
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: HTTPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: tcp
|
|
protocol: TCP
|
|
port: 9000
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: TCPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: tls-10000
|
|
protocol: TLS
|
|
port: 10000
|
|
hostname: tls.foo.example.com
|
|
tls:
|
|
certificateRefs:
|
|
- kind: Secret
|
|
name: supersecret
|
|
group: ""
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: TCPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: tls-11000
|
|
protocol: TLS
|
|
port: 11000
|
|
hostname: pass.tls.foo.example.com
|
|
tls:
|
|
mode: Passthrough
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: TLSRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
---
|
|
kind: HTTPRoute
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
metadata:
|
|
name: http-app-1
|
|
namespace: default
|
|
spec:
|
|
parentRefs:
|
|
- name: my-gateway
|
|
sectionName: http
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
- name: my-gateway
|
|
sectionName: https
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
backendRefs:
|
|
- name: whoami
|
|
port: 80
|
|
weight: 1
|
|
kind: Service
|
|
group: ""
|
|
|
|
---
|
|
kind: TCPRoute
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: tcp-app-1
|
|
namespace: default
|
|
spec:
|
|
parentRefs:
|
|
- name: my-gateway
|
|
sectionName: tcp
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
- name: my-gateway
|
|
sectionName: tls-10000
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
backendRefs:
|
|
- name: whoamitcp
|
|
port: 9000
|
|
weight: 1
|
|
kind: Service
|
|
group: ""
|
|
|
|
---
|
|
kind: TLSRoute
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: tls-app-1
|
|
namespace: default
|
|
spec:
|
|
parentRefs:
|
|
- name: my-gateway
|
|
sectionName: tls-11000
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
backendRefs:
|
|
- name: whoamitcp
|
|
port: 9000
|
|
weight: 1
|
|
kind: Service
|
|
group: ""
|