update default deny

Signed-off-by: gwg313 <gwg313@pm.me>
This commit is contained in:
gwg313 2026-05-16 15:21:35 -04:00
parent 68bebdae57
commit bfe8435665
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
21 changed files with 470 additions and 235 deletions

37
audiobookshelf/route.yaml Normal file
View file

@ -0,0 +1,37 @@
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: audiobookshelf
namespace: audiobookshelf
spec:
parentRefs:
- name: shared-edge-gateway
namespace: cilium-ingress
hostnames:
- "audiobooks.local.gwg313.xyz"
- "audiobooks.gwg313.xyz"
- "audiobooks.zerotier.gwg313.xyz"
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: audiobookshelf
port: 80
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata:
name: allow-gateway-to-audiobookshelf
namespace: audiobookshelf
spec:
from:
- group: gateway.networking.k8s.io
kind: Gateway
namespace: cilium-ingress
to:
- group: ""
kind: Service
name: audiobookshelf