jitsi-k8s/03-services.yml

kind: Service
apiVersion: v1
metadata:
  name: web
  namespace: jitsi
spec:
  ports:
    - port: 80
      targetPort: 80
      name: http
      protocol: TCP   
    - port: 443
      targetPort: 443
      name: https
      protocol: TCP   
  selector:
    app: web

---

kind: Service
apiVersion: v1
metadata:
  name: prosody
  namespace: jitsi
spec:
  ports:
    - port: 5222
      targetPort: 5222
      protocol: TCP
      name: xmpp
    - port: 5269
      targetPort: 5269
      protocol: TCP
      name: s2s
    - port: 5347
      targetPort: 5347
      protocol: TCP
      name: idk
    - port: 5280
      targetPort: 5280
      protocol: TCP
      name: http
  selector:
    app: prosody

---

kind: Service
apiVersion: v1
metadata:
  name: jvb
  namespace: jitsi
spec:
  ports:
    - port: 10000
      targetPort: 10000
      name: jvb
      protocol: UDP     
  selector:
    app: jvb

---

apiVersion: traefik.io/v1alpha1
kind: IngressRouteUDP
metadata:
  name: jvb
  namespace: jitsi
spec:
  entryPoints:
  - jitsi-udp
  routes:
  - services:
    - name: jvb
      port: 10000

# ---

# apiVersion: traefik.io/v1alpha1
# kind: Middleware
# metadata:
#   name: websocket
#   namespace: jitsi
# spec:
#   headers:
#     customRequestHeaders:
#       Connection: keep-alive, Upgrade
#       Upgrade: WebSocket

# ---

# apiVersion: networking.k8s.io/v1
# kind: Ingress
# metadata:
#   name: websocket
#   namespace: jitsi
#   annotations:
#     cert-manager.io/cluster-issuer: letsencrypt-production
#     traefik.ingress.kubernetes.io/router.middlewares: >-
#       traefik-secure@kubernetescrd,jitsi-websocket@kubernetescrd
# spec:
#   ingressClassName: traefik
#   tls:
#   - hosts:
#     - jitsi.tek.govt.hu
#     secretName: jitsi-tls
#   rules:
#     - host: jitsi.tek.govt.hu
#       http:
#         paths:
#         - path: /xmpp-websocket
#           pathType: Prefix
#           backend:
#             service:
#               name: web
#               port:
#                 number: 80

---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: jitsi
  namespace: jitsi
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-staging
    # traefik.ingress.kubernetes.io/router.middlewares: >-
    #   traefik-secure@kubernetescrd
spec:
  ingressClassName: traefik
  tls:
  - hosts:
    - jitsi.tek.govt.hu
    secretName: jitsi-tls
  rules:
    - host: jitsi.tek.govt.hu
      http:
        paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: web
              port:
                number: 80