159 lines
3.3 KiB
YAML
159 lines
3.3 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: supersecret
|
|
namespace: default
|
|
|
|
data:
|
|
tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0=
|
|
tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0=
|
|
|
|
---
|
|
kind: GatewayClass
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: my-gateway-class
|
|
spec:
|
|
controllerName: traefik.io/gateway-controller
|
|
|
|
---
|
|
kind: Gateway
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: my-gateway
|
|
namespace: default
|
|
spec:
|
|
gatewayClassName: my-gateway-class
|
|
listeners: # Use GatewayClass defaults for listener definition.
|
|
- name: http
|
|
protocol: HTTP
|
|
port: 9080
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: HTTPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: https
|
|
protocol: HTTPS
|
|
port: 9443
|
|
tls:
|
|
certificateRefs:
|
|
- kind: Secret
|
|
name: supersecret
|
|
group: ""
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: HTTPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: tcp
|
|
protocol: TCP
|
|
port: 9000
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: TCPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: tls-10000
|
|
protocol: TLS
|
|
port: 10000
|
|
hostname: tls.foo.example.com
|
|
tls:
|
|
certificateRefs:
|
|
- kind: Secret
|
|
name: supersecret
|
|
group: ""
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: TCPRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
- name: tls-11000
|
|
protocol: TLS
|
|
port: 11000
|
|
hostname: pass.tls.foo.example.com
|
|
tls:
|
|
mode: Passthrough
|
|
allowedRoutes:
|
|
kinds:
|
|
- kind: TLSRoute
|
|
group: gateway.networking.k8s.io
|
|
namespaces:
|
|
from: Same
|
|
|
|
---
|
|
kind: HTTPRoute
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: http-app-1
|
|
namespace: default
|
|
spec:
|
|
parentRefs:
|
|
- name: my-gateway
|
|
sectionName: http
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
- name: my-gateway
|
|
sectionName: https
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
rules:
|
|
- backendRefs:
|
|
- name: whoami
|
|
port: 80
|
|
weight: 1
|
|
kind: Service
|
|
group: ""
|
|
|
|
---
|
|
kind: TCPRoute
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: tcp-app-1
|
|
namespace: default
|
|
spec:
|
|
parentRefs:
|
|
- name: my-gateway
|
|
sectionName: tcp
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
- name: my-gateway
|
|
sectionName: tls-10000
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
rules:
|
|
- backendRefs:
|
|
- name: whoamitcp
|
|
port: 9000
|
|
weight: 1
|
|
kind: Service
|
|
group: ""
|
|
|
|
---
|
|
kind: TLSRoute
|
|
apiVersion: gateway.networking.k8s.io/v1alpha2
|
|
metadata:
|
|
name: tls-app-1
|
|
namespace: default
|
|
spec:
|
|
parentRefs:
|
|
- name: my-gateway
|
|
sectionName: tls-11000
|
|
kind: Gateway
|
|
group: gateway.networking.k8s.io
|
|
rules:
|
|
- backendRefs:
|
|
- name: whoamitcp
|
|
port: 9000
|
|
weight: 1
|
|
kind: Service
|
|
group: ""
|