feat: disable oauth for radarr api

API is secured by API key anyways.

Author: denniseffing

kubernetes/main/apps/default/radarr/app/helmrelease.yaml

@@ -90,6 +90,24 @@ spec:
         parentRefs:
           - name: envoy-internal
             namespace: network
+      api:
+        hostnames:
+          - "radarr.internal.denniseffing.de"
+        parentRefs:
+          - name: envoy-internal
+            namespace: network
+        rules:
+          - name: api
+            matches:
+              - path:
+                  type: PathPrefix
+                  value: /api
+            backendRefs:
+              - group: ""
+                kind: Service
+                name: radarr
+                port: 80
+                weight: 1
     persistence:
       config:
         existingClaim: radarr-config

kubernetes/main/apps/default/radarr/app/kustomization.yaml

@@ -5,3 +5,4 @@ resources:
   - helmrelease.yaml
   - ocirepository.yaml
   - pvc.yaml
+  - securitypolicy.yaml

kubernetes/main/apps/default/radarr/app/securitypolicy.yaml

@@ -0,0 +1,9 @@
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: SecurityPolicy
+metadata:
+  name: radarr-api-disable-auth
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: radarr-api