feat: envoy-gateway

kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml

@@ -83,35 +83,17 @@ spec:
         ports:
           http:
             port: *port
-    ingress:
+    route:
       app:
-        enabled: true
-        className: internal
-        annotations:
-          nginx.ingress.kubernetes.io/auth-method: GET
-          nginx.ingress.kubernetes.io/auth-url: http://authelia.default.svc.cluster.local.:8888/api/verify
-          nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
-          nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
-          nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
-          gethomepage.dev/enabled: "true"
-          gethomepage.dev/name: Zigbee2mqtt
-          gethomepage.dev/description: Bridge for connecting Zigbee devices to MQTT networks.
-          gethomepage.dev/group: Applications
-          gethomepage.dev/icon: zigbee2mqtt.png
-          gethomepage.dev/pod-selector: >-
-            app in (
-              zigbee2mqtt
-            )
-        hosts:
-          - host: &host "zigbee.${SECRET_EXTERNAL_DOMAIN}"
-            paths:
-              - path: /
-                service:
-                  identifier: app
-                  port: http
-        tls:
-          - hosts:
-              - *host
+        hostnames: ["zigbee.${SECRET_EXTERNAL_DOMAIN}"]
+        parentRefs:
+          - name: internal
+            namespace: network
+            sectionName: https
+        rules:
+          - backendRefs:
+              - name: *app
+                port: *port
     persistence:
       config:
         enabled: true

kubernetes/apps/default/zigbee2mqtt/ks.yaml

@@ -19,6 +19,7 @@ spec:
     - name: volsync
       namespace: volsync
   components:
+    - ../../../../components/ext-auth
     - ../../../../components/gatus/guarded
     - ../../../../components/volsync
   interval: 1h