Drop the manual KongCertificate/KongSNI workaround

Turned out unnecessary: the real blocker was the missing
konghq.com/secret=true label on the Vault-sourced Secret, not a gap
in the Gateway API TLS translation itself. Once that label was added
(k8s-platform), the operator's own auto-generated KongCertificate/SNI
started working and this manual one just collided with it.
This commit is contained in:
Stéphane Tailland
2026-08-21 09:51:23 +02:00
parent 01f873b773
commit fa7abfe5bd
2 changed files with 0 additions and 24 deletions
-1
View File
@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- rest/service.yaml
- rest/certificate.yaml
- rest/routes.yaml
- rest/path-rewrite.yaml
- rest/path-rewrite-bindings.yaml
-23
View File
@@ -1,23 +0,0 @@
apiVersion: configuration.konghq.com/v1alpha1
kind: KongCertificate
metadata:
name: ${NAME}
namespace: ${NAMESPACE}
spec:
controlPlaneRef:
type: konnectNamespacedRef
konnectNamespacedRef:
name: ${CONTROL_PLANE_REF_NAME}
type: secretRef
secretRef:
name: ${NAME}-tls
---
apiVersion: configuration.konghq.com/v1alpha1
kind: KongSNI
metadata:
name: ${NAME}
namespace: ${NAMESPACE}
spec:
name: ${REST_HOSTNAME}
certificateRef:
name: ${NAME}