From 53d5723141ee396ffdb94c9bb3e5cbd61d43a56a Mon Sep 17 00:00:00 2001
From: Ultradesu <ultradesu@hexor.cy>
Date: Mon, 8 Dec 2025 18:41:33 +0200
Subject: [PATCH] Reworked pasarguard nodes daemonset.

---
 .../pasarguard/configmap-scripts-ingress.yaml | 29 +++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/k8s/apps/pasarguard/configmap-scripts-ingress.yaml b/k8s/apps/pasarguard/configmap-scripts-ingress.yaml
index 306b936..9675b43 100644
--- a/k8s/apps/pasarguard/configmap-scripts-ingress.yaml
+++ b/k8s/apps/pasarguard/configmap-scripts-ingress.yaml
@@ -169,6 +169,35 @@ data:
     echo "IngressRouteTCP created: ${INGRESS_NAME}"
     echo "Traffic to ${DNS_NAME}:443 will be routed to ${SERVICE_NAME}:443"
 
+    # Create second IngressRouteTCP for API port 62050
+    INGRESS_API_NAME="pasarguard-api-${DNS_NAME//./-}"
+
+    echo "Creating IngressRouteTCP for API: ${INGRESS_API_NAME} for ${DNS_NAME}:62050"
+
+    cat <<EOF | kubectl apply -f -
+    apiVersion: traefik.io/v1alpha1
+    kind: IngressRouteTCP
+    metadata:
+      name: ${INGRESS_API_NAME}
+      namespace: ${NAMESPACE}
+      labels:
+        app: pasarguard-node-ingress
+        node: ${NODE_NAME}
+    spec:
+      entryPoints:
+        - pasarguard-api
+      routes:
+        - match: HostSNI(\`${DNS_NAME}\`)
+          services:
+            - name: ${SERVICE_NAME}
+              port: 62050
+      tls:
+        passthrough: true
+    EOF
+
+    echo "IngressRouteTCP API created: ${INGRESS_API_NAME}"
+    echo "Traffic to ${DNS_NAME}:62050 will be routed to ${SERVICE_NAME}:62050"
+
   pasarguard-start.sh: |
     #!/bin/sh
     # Read API_KEY from shared volume created by init container