From 639b6b1fd01ad566b795873becaf65e9ace25f80 Mon Sep 17 00:00:00 2001 From: William P Date: Thu, 2 Jul 2026 20:45:55 -0400 Subject: [PATCH] cert-manager: add ReferenceGrants for all traefik users ahead of ingress-to-gateway migration --- .../config/ReferenceGrants/argocd.yaml | 14 ++++++++++++++ .../cert-manager/config/ReferenceGrants/attic.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/authentik.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/duby-blog.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/dubyatp-xyz.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/frenworld-archive.yaml | 14 ++++++++++++++ .../cert-manager/config/ReferenceGrants/gitea.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/grafana.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/jellyfin.yaml | 14 ++++++++++++++ .../cert-manager/config/ReferenceGrants/kite.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/lumfao-dubyatp-xyz.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/netmaker.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/nextcloud.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/rook-ceph.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/traefik.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/vaultwarden.yaml | 14 ++++++++++++++ .../config/ReferenceGrants/whatismyip.yaml | 14 ++++++++++++++ .../ReferenceGrants/williamtpeebles-com.yaml | 14 ++++++++++++++ 18 files changed, 252 insertions(+) create mode 100644 system-apps/cert-manager/config/ReferenceGrants/argocd.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/attic.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/authentik.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/duby-blog.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/dubyatp-xyz.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/frenworld-archive.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/gitea.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/grafana.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/jellyfin.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/kite.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/lumfao-dubyatp-xyz.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/netmaker.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/nextcloud.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/rook-ceph.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/traefik.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/vaultwarden.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/whatismyip.yaml create mode 100644 system-apps/cert-manager/config/ReferenceGrants/williamtpeebles-com.yaml diff --git a/system-apps/cert-manager/config/ReferenceGrants/argocd.yaml b/system-apps/cert-manager/config/ReferenceGrants/argocd.yaml new file mode 100644 index 0000000..9053791 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/argocd.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-argocd + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: argocd + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/attic.yaml b/system-apps/cert-manager/config/ReferenceGrants/attic.yaml new file mode 100644 index 0000000..591d623 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/attic.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-attic + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: attic + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/authentik.yaml b/system-apps/cert-manager/config/ReferenceGrants/authentik.yaml new file mode 100644 index 0000000..ddb808f --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/authentik.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-authentik + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: authentik + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/duby-blog.yaml b/system-apps/cert-manager/config/ReferenceGrants/duby-blog.yaml new file mode 100644 index 0000000..2b87ba9 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/duby-blog.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-duby-blog + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: duby-blog + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/dubyatp-xyz.yaml b/system-apps/cert-manager/config/ReferenceGrants/dubyatp-xyz.yaml new file mode 100644 index 0000000..c5fe80b --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/dubyatp-xyz.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-dubyatp-xyz + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: dubyatp-xyz + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/frenworld-archive.yaml b/system-apps/cert-manager/config/ReferenceGrants/frenworld-archive.yaml new file mode 100644 index 0000000..304a3b7 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/frenworld-archive.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-frenworld-archive + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: frenworld-archive + to: + - group: "" + kind: Secret + name: cert-frenworld-archive-io \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/gitea.yaml b/system-apps/cert-manager/config/ReferenceGrants/gitea.yaml new file mode 100644 index 0000000..6643384 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/gitea.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-gitea + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: gitea + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/grafana.yaml b/system-apps/cert-manager/config/ReferenceGrants/grafana.yaml new file mode 100644 index 0000000..194ab7e --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/grafana.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-grafana + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: grafana + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/jellyfin.yaml b/system-apps/cert-manager/config/ReferenceGrants/jellyfin.yaml new file mode 100644 index 0000000..c844431 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/jellyfin.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-jellyfin + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: jellyfin + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/kite.yaml b/system-apps/cert-manager/config/ReferenceGrants/kite.yaml new file mode 100644 index 0000000..625a1e0 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/kite.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-kite + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: kite + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/lumfao-dubyatp-xyz.yaml b/system-apps/cert-manager/config/ReferenceGrants/lumfao-dubyatp-xyz.yaml new file mode 100644 index 0000000..c2d91eb --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/lumfao-dubyatp-xyz.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-lumfao-dubyatp-xyz + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: lumfao-dubyatp-xyz + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/netmaker.yaml b/system-apps/cert-manager/config/ReferenceGrants/netmaker.yaml new file mode 100644 index 0000000..d04014e --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/netmaker.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-netmaker + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: netmaker + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/nextcloud.yaml b/system-apps/cert-manager/config/ReferenceGrants/nextcloud.yaml new file mode 100644 index 0000000..daf5fe6 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/nextcloud.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-nextcloud + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: nextcloud + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/rook-ceph.yaml b/system-apps/cert-manager/config/ReferenceGrants/rook-ceph.yaml new file mode 100644 index 0000000..5672c73 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/rook-ceph.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-rook-ceph + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: rook-ceph + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/traefik.yaml b/system-apps/cert-manager/config/ReferenceGrants/traefik.yaml new file mode 100644 index 0000000..9f85eda --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/traefik.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-traefik + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: traefik + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/vaultwarden.yaml b/system-apps/cert-manager/config/ReferenceGrants/vaultwarden.yaml new file mode 100644 index 0000000..47b1d84 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/vaultwarden.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-vaultwarden + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: vaultwarden + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/whatismyip.yaml b/system-apps/cert-manager/config/ReferenceGrants/whatismyip.yaml new file mode 100644 index 0000000..37fbb52 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/whatismyip.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-whatismyip + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: whatismyip + to: + - group: "" + kind: Secret + name: cert-dubyatp-xyz \ No newline at end of file diff --git a/system-apps/cert-manager/config/ReferenceGrants/williamtpeebles-com.yaml b/system-apps/cert-manager/config/ReferenceGrants/williamtpeebles-com.yaml new file mode 100644 index 0000000..22e5488 --- /dev/null +++ b/system-apps/cert-manager/config/ReferenceGrants/williamtpeebles-com.yaml @@ -0,0 +1,14 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: ReferenceGrant +metadata: + name: test-williamtpeebles-com + namespace: cert-manager +spec: + from: + - group: gateway.networking.k8s.io + kind: Gateway + namespace: williamtpeebles-com + to: + - group: "" + kind: Secret + name: cert-williamtpeebles-com \ No newline at end of file