130 lines
2.5 KiB
YAML
130 lines
2.5 KiB
YAML
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: allowed-relay
|
||
|
|
namespace: public-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-relay
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: denied-relay
|
||
|
|
namespace: denied-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-relay
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: allowed-internal
|
||
|
|
namespace: internal-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-internal
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: denied-internal
|
||
|
|
namespace: denied-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-internal
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: unrelated-gateway
|
||
|
|
namespace: denied-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: application-gateway
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: short-http-allowed
|
||
|
|
namespace: short-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: short-http-denied
|
||
|
|
namespace: denied-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: short-http-public
|
||
|
|
namespace: public-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: TCPRoute
|
||
|
|
metadata:
|
||
|
|
name: short-tcp-allowed
|
||
|
|
namespace: minecraft
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: TCPRoute
|
||
|
|
metadata:
|
||
|
|
name: short-tcp-denied
|
||
|
|
namespace: denied-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: TCPRoute
|
||
|
|
metadata:
|
||
|
|
name: short-tcp-public
|
||
|
|
namespace: public-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: TCPRoute
|
||
|
|
metadata:
|
||
|
|
name: unrelated-tcp
|
||
|
|
namespace: denied-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-relay
|
||
|
|
namespace: kube-system
|
||
|
|
---
|
||
|
|
apiVersion: gateway.networking.k8s.io/v1
|
||
|
|
kind: HTTPRoute
|
||
|
|
metadata:
|
||
|
|
name: mixed-parents
|
||
|
|
namespace: public-client
|
||
|
|
spec:
|
||
|
|
parentRefs:
|
||
|
|
- name: gateway-relay
|
||
|
|
namespace: kube-system
|
||
|
|
- name: gateway-short
|
||
|
|
namespace: kube-system
|