Reworked pasarguard nodes daemonset.

k8s/apps/pasarguard/configmap-scripts-ingress.yaml

@@ -169,6 +169,35 @@ data:
     echo "IngressRouteTCP created: ${INGRESS_NAME}"
     echo "Traffic to ${DNS_NAME}:443 will be routed to ${SERVICE_NAME}:443"
 
+    # Create second IngressRouteTCP for API port 62050
+    INGRESS_API_NAME="pasarguard-api-${DNS_NAME//./-}"
+
+    echo "Creating IngressRouteTCP for API: ${INGRESS_API_NAME} for ${DNS_NAME}:62050"
+
+    cat <<EOF | kubectl apply -f -
+    apiVersion: traefik.io/v1alpha1
+    kind: IngressRouteTCP
+    metadata:
+      name: ${INGRESS_API_NAME}
+      namespace: ${NAMESPACE}
+      labels:
+        app: pasarguard-node-ingress
+        node: ${NODE_NAME}
+    spec:
+      entryPoints:
+        - pasarguard-api
+      routes:
+        - match: HostSNI(\`${DNS_NAME}\`)
+          services:
+            - name: ${SERVICE_NAME}
+              port: 62050
+      tls:
+        passthrough: true
+    EOF
+
+    echo "IngressRouteTCP API created: ${INGRESS_API_NAME}"
+    echo "Traffic to ${DNS_NAME}:62050 will be routed to ${SERVICE_NAME}:62050"
+
   pasarguard-start.sh: |
     #!/bin/sh
     # Read API_KEY from shared volume created by init container