Drop the manual KongCertificate/KongSNI workaround
Turned out unnecessary: the real blocker was the missing konghq.com/secret=true label on the Vault-sourced Secret, not a gap in the Gateway API TLS translation itself. Once that label was added (k8s-platform), the operator's own auto-generated KongCertificate/SNI started working and this manual one just collided with it.
This commit is contained in:
@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
|
|||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
resources:
|
resources:
|
||||||
- rest/service.yaml
|
- rest/service.yaml
|
||||||
- rest/certificate.yaml
|
|
||||||
- rest/routes.yaml
|
- rest/routes.yaml
|
||||||
- rest/path-rewrite.yaml
|
- rest/path-rewrite.yaml
|
||||||
- rest/path-rewrite-bindings.yaml
|
- rest/path-rewrite-bindings.yaml
|
||||||
|
|||||||
@@ -1,23 +0,0 @@
|
|||||||
apiVersion: configuration.konghq.com/v1alpha1
|
|
||||||
kind: KongCertificate
|
|
||||||
metadata:
|
|
||||||
name: ${NAME}
|
|
||||||
namespace: ${NAMESPACE}
|
|
||||||
spec:
|
|
||||||
controlPlaneRef:
|
|
||||||
type: konnectNamespacedRef
|
|
||||||
konnectNamespacedRef:
|
|
||||||
name: ${CONTROL_PLANE_REF_NAME}
|
|
||||||
type: secretRef
|
|
||||||
secretRef:
|
|
||||||
name: ${NAME}-tls
|
|
||||||
---
|
|
||||||
apiVersion: configuration.konghq.com/v1alpha1
|
|
||||||
kind: KongSNI
|
|
||||||
metadata:
|
|
||||||
name: ${NAME}
|
|
||||||
namespace: ${NAMESPACE}
|
|
||||||
spec:
|
|
||||||
name: ${REST_HOSTNAME}
|
|
||||||
certificateRef:
|
|
||||||
name: ${NAME}
|
|
||||||
Reference in New Issue
Block a user