81 lines
1.6 KiB
YAML
81 lines
1.6 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: supersecret
|
|
namespace: default
|
|
|
|
data:
|
|
tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0=
|
|
tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0=
|
|
|
|
---
|
|
kind: GatewayClass
|
|
apiVersion: networking.x-k8s.io/v1alpha1
|
|
metadata:
|
|
name: my-gateway-class
|
|
namespace: default
|
|
spec:
|
|
controller: traefik.io/gateway-controller
|
|
|
|
---
|
|
kind: Gateway
|
|
apiVersion: networking.x-k8s.io/v1alpha1
|
|
metadata:
|
|
name: my-tls-gateway
|
|
namespace: default
|
|
spec:
|
|
gatewayClassName: my-gateway-class
|
|
listeners: # Use GatewayClass defaults for listener definition.
|
|
- protocol: TLS
|
|
hostname: foo.example.com
|
|
port: 9000
|
|
tls:
|
|
certificateRef:
|
|
kind: Secret
|
|
name: supersecret
|
|
group: core
|
|
routes:
|
|
kind: TCPRoute
|
|
selector:
|
|
matchLabels:
|
|
app: label-tcp-app-1
|
|
- protocol: TLS
|
|
port: 10000
|
|
tls:
|
|
mode: Passthrough
|
|
routes:
|
|
kind: TLSRoute
|
|
selector:
|
|
matchLabels:
|
|
app: label-tls-app-1
|
|
|
|
---
|
|
kind: TCPRoute
|
|
apiVersion: networking.x-k8s.io/v1alpha1
|
|
metadata:
|
|
name: tcp-app-1
|
|
namespace: default
|
|
labels:
|
|
app: label-tcp-app-1
|
|
spec:
|
|
rules:
|
|
- forwardTo:
|
|
- serviceName: whoamitcp
|
|
port: 9000
|
|
weight: 1
|
|
|
|
---
|
|
kind: TLSRoute
|
|
apiVersion: networking.x-k8s.io/v1alpha1
|
|
metadata:
|
|
name: tls-app-1
|
|
namespace: default
|
|
labels:
|
|
app: label-tls-app-1
|
|
spec:
|
|
rules:
|
|
- forwardTo:
|
|
- serviceName: whoamitcp
|
|
port: 10000
|
|
weight: 1
|