cert-manager: add ReferenceGrants for all traefik users ahead of ingress-to-gateway migration

2026-07-02 20:45:55 -04:00
parent 714a61355e
commit 639b6b1fd0
18 changed files with 252 additions and 0 deletions
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-argocd
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: argocd
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-attic
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: attic
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-authentik
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: authentik
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-duby-blog
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: duby-blog
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-dubyatp-xyz
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: dubyatp-xyz
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-frenworld-archive
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: frenworld-archive
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-frenworld-archive-io
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-gitea
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: gitea
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-grafana
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: grafana
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-jellyfin
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: jellyfin
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-kite
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: kite
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-lumfao-dubyatp-xyz
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: lumfao-dubyatp-xyz
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-netmaker
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: netmaker
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-nextcloud
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: nextcloud
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-rook-ceph
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: rook-ceph
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-traefik
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: traefik
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-vaultwarden
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: vaultwarden
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-whatismyip
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: whatismyip
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-dubyatp-xyz
@@ -0,0 +1,14 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: ReferenceGrant
+metadata:
+  name: test-williamtpeebles-com
+  namespace: cert-manager
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    namespace: williamtpeebles-com
+  to:
+  - group: ""
+    kind: Secret
+    name: cert-williamtpeebles-com