Skip to content

Commit 838b46d

Browse files
committed
Fix HTTP listener hostname configuration to prevent HostnameConflict in Kong Gateway
1 parent faba314 commit 838b46d

1 file changed

Lines changed: 5 additions & 3 deletions

File tree

platform/networking/gateway.yaml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -60,14 +60,16 @@ spec:
6060
- group: gateway.networking.k8s.io
6161
kind: TLSRoute
6262
# HTTP listener for web UIs on the same Kong data plane as the Kafka listener.
63-
# The wildcard hostname lets several UIs attach by their own host - each HTTPRoute
64-
# picks a concrete name (backstage.127-0-0-1.sslip.io, argocd.127-0-0-1.sslip.io).
63+
# No hostname is set on purpose: giving it the same "*.127-0-0-1.sslip.io" wildcard
64+
# as the kafka-tls listener makes Kong report a listener HostnameConflict (it treats
65+
# an identical hostname string across listeners as a conflict, even on a different
66+
# port). With the hostname omitted, this listener accepts any Host and each HTTPRoute
67+
# (backstage.127-0-0-1.sslip.io, argocd.127-0-0-1.sslip.io) restricts to its own name.
6568
# `from: All` allows HTTPRoutes from other namespaces (backstage, argocd) to attach
6669
# cross-namespace; no ReferenceGrant is needed because each route's backend is local.
6770
- name: web
6871
protocol: HTTP
6972
port: 80
70-
hostname: "*.127-0-0-1.sslip.io"
7173
allowedRoutes:
7274
namespaces:
7375
from: All

0 commit comments

Comments
 (0)