e4642b372c
Label the Vault-sourced TLS secret konghq.com/secret=true
...
The Kong Gateway Operator only watches Secrets carrying this label,
same as the existing Konnect PAT ExternalSecret already does.
2026-08-21 09:49:41 +02:00
9376bc3cb3
Source per-domain Gateway TLS certs from Vault instead of cert-manager
...
cert-manager-issued Certificates never synced to Konnect as KongCertificate
objects through the Gateway API listener path, so dataplanes fell back to
Kong's default self-signed cert. Reuse the working kong-namespace pattern
(a static wildcard cert) via ExternalSecret instead.
2026-08-21 09:37:31 +02:00
b4fd7064a3
Globol Policies template
2026-08-20 12:11:59 +02:00
2a35066dbf
Globol Policies template
2026-08-20 11:34:32 +02:00
5e4cdc5c85
Globol Policies template
2026-08-20 11:28:14 +02:00
3879f775b8
Globol Policies template
2026-08-20 11:26:01 +02:00
bf9fcaecd3
External Secrets Store
2026-08-19 18:53:35 +02:00
22348ce610
Template defaults
2026-08-19 17:34:06 +02:00
6afd9c4c5f
First commit
2026-08-19 16:57:43 +02:00
8650f4ae7b
Scaffold k8s-platform (Operator install only)
2026-08-18 14:59:45 +02:00
Stéphane Tailland