Template defaults

dataplane-template/certificate.yaml

@@ -0,0 +1,16 @@
+# Not a self-signed cert hand-copied into a Secret like
+# ~/dev/kong/kube/gateway/apigw/secret.yaml does — issuer is per-domain/env
+# config (e.g. sttlab-local-ca ClusterIssuer for local, a real ACME issuer
+# for prod), not hardcoded here.
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: ${NAME}
+  namespace: ${NAMESPACE}
+spec:
+  secretName: ${NAME}-tls
+  dnsNames:
+    - ${HOSTNAME}
+  issuerRef:
+    kind: ${TLS_ISSUER_KIND}
+    name: ${TLS_ISSUER_NAME}

dataplane-template/gateway.yaml

@@ -21,4 +21,4 @@ spec:
       tls:
         certificateRefs:
           - kind: Secret
-            name: ${TLS_SECRET_NAME}
+            name: ${NAME}-tls

dataplane-template/konnectapiauthconfiguration.yaml

@@ -6,5 +6,5 @@ metadata:
 spec:
   type: secretRef
   secretRef:
-    name: ${KONNECT_AUTH_SECRET_NAME}
+    name: ${NAME}-konnect-auth
   serverURL: ${KONNECT_SERVER_URL}

dataplane-template/kustomization.yaml

@@ -5,3 +5,4 @@ resources:
   - gatewayconfiguration.yaml
   - gateway.yaml
   - secret.yaml
+  - certificate.yaml

dataplane-template/secret.yaml

@@ -5,7 +5,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: ${KONNECT_AUTH_SECRET_NAME}
+  name: ${NAME}-konnect-auth
   namespace: ${NAMESPACE}
   labels:
     konghq.com/credential: konnect