From daafd6446ce315f7f6ffb33a650ebbf2b606492f Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Wed, 19 Apr 2023 04:23:48 +0800
Subject: [PATCH] revert(kanidm): fix HTTPS via LBIP 443 to ingress

---
 kube/3-deploy/2-apps/kanidm/app/hr.yaml | 50 +++----------------------
 1 file changed, 6 insertions(+), 44 deletions(-)

diff --git a/kube/3-deploy/2-apps/kanidm/app/hr.yaml b/kube/3-deploy/2-apps/kanidm/app/hr.yaml
index 84d9c2a0..397fd8f9 100644
--- a/kube/3-deploy/2-apps/kanidm/app/hr.yaml
+++ b/kube/3-deploy/2-apps/kanidm/app/hr.yaml
@@ -23,13 +23,6 @@ spec:
       TZ: "${CONFIG_TZ}"
     service:
       main:
-        enabled: true
-        ports:
-          http:
-            port: 8443
-            targetPort: 8443
-            protocol: HTTPS
-      ldap:
         enabled: true
         type: LoadBalancer
         externalTrafficPolicy: Local
@@ -39,6 +32,11 @@ spec:
         externalIPs:
           - "${APP_IP_KANIDM}"
         ports:
+          http:
+            enabled: true
+            port: 443
+            targetPort: 8443
+            protocol: HTTPS
           ldap-tcp:
             enabled: true
             port: 636
@@ -47,6 +45,7 @@ spec:
           ldap-udp:
             enabled: true
             port: 636
+            targetPort: 3636
             protocol: UDP
     ingress:
       main:
@@ -148,40 +147,3 @@ spec:
           name: data
         - mountPath: /config
           name: config
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: kanidm-lb-ldap
-  namespace: ingress
-  annotations:
-    coredns.io/hostname: "${APP_DNS_KANIDM}"
-    "io.cilium/lb-ipam-ips": "${APP_IP_KANIDM}"
-spec:
-  type: LoadBalancer
-  externalIPs:
-    - ${APP_IP_KANIDM}
-  externalTrafficPolicy: Local
-  ports:
-    - appProtocol: http
-      name: http
-      protocol: TCP
-      port: 20080
-      targetPort: 80
-    - appProtocol: https
-      name: https
-      protocol: TCP
-      port: 20443
-      targetPort: 443
-    - name: internalhttp
-      protocol: TCP
-      port: 80
-      targetPort: 42080
-    - name: internalhttps
-      protocol: TCP
-      port: 443
-      targetPort: 42443
-  selector:
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx