apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"gateway.networking.k8s.io/v1","kind":"HTTPRoute","metadata":{"annotations":{},"labels":{"app":"keycloak","purpose":"maas-oidc"},"name":"keycloak-route","namespace":"keycloak-system"},"spec":{"hostnames":["keycloak.apps.5c43e5de-d073-474e-a0ed-4ae6f0aa219b.prod.konfluxeaas.com"],"parentRefs":[{"name":"maas-default-gateway","namespace":"openshift-ingress"}],"rules":[{"backendRefs":[{"name":"maas-keycloak-service","port":8080}],"matches":[{"path":{"type":"PathPrefix","value":"/"}}]}]}}
  creationTimestamp: "2026-06-10T11:28:58Z"
  generation: 1
  labels:
    app: keycloak
    purpose: maas-oidc
  managedFields:
  - apiVersion: gateway.networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:kubectl.kubernetes.io/last-applied-configuration: {}
        f:labels:
          .: {}
          f:app: {}
          f:purpose: {}
      f:spec: {}
    manager: kubectl-client-side-apply
    operation: Update
    time: "2026-06-10T11:28:58Z"
  - apiVersion: gateway.networking.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:status: {}
    manager: pilot-discovery
    operation: Update
    subresource: status
    time: "2026-06-10T11:28:58Z"
  - apiVersion: gateway.networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:parents: {}
    manager: manager
    operation: Update
    subresource: status
    time: "2026-06-10T11:29:38Z"
  name: keycloak-route
  namespace: keycloak-system
  resourceVersion: "24161"
  uid: c51b447d-2e45-4004-bd7f-0c779ee15f0f
spec:
  hostnames:
  - keycloak.apps.5c43e5de-d073-474e-a0ed-4ae6f0aa219b.prod.konfluxeaas.com
  parentRefs:
  - group: gateway.networking.k8s.io
    kind: Gateway
    name: maas-default-gateway
    namespace: openshift-ingress
  rules:
  - backendRefs:
    - group: ""
      kind: Service
      name: maas-keycloak-service
      port: 8080
      weight: 1
    matches:
    - path:
        type: PathPrefix
        value: /
status:
  parents:
  - conditions:
    - lastTransitionTime: "2026-06-10T11:28:58Z"
      message: no hostnames matched parent hostname "maas.apps.5c43e5de-d073-474e-a0ed-4ae6f0aa219b.prod.konfluxeaas.com"
      observedGeneration: 1
      reason: NoMatchingListenerHostname
      status: "False"
      type: Accepted
    - lastTransitionTime: "2026-06-10T11:28:58Z"
      message: All references resolved
      observedGeneration: 1
      reason: ResolvedRefs
      status: "True"
      type: ResolvedRefs
    controllerName: openshift.io/gateway-controller/v1
    parentRef:
      group: gateway.networking.k8s.io
      kind: Gateway
      name: maas-default-gateway
      namespace: openshift-ingress
  - conditions:
    - lastTransitionTime: "2026-06-10T11:29:38Z"
      message: Object affected by AuthPolicy [openshift-ingress/gateway-default-auth]
      observedGeneration: 1
      reason: Accepted
      status: "True"
      type: kuadrant.io/AuthPolicyAffected
    - lastTransitionTime: "2026-06-10T11:29:38Z"
      message: Object affected by TokenRateLimitPolicy [openshift-ingress/gateway-default-deny]
      observedGeneration: 1
      reason: Accepted
      status: "True"
      type: kuadrant.io/TokenRateLimitPolicyAffected
    controllerName: kuadrant.io/policy-controller
    parentRef:
      group: gateway.networking.k8s.io
      kind: Gateway
      name: maas-default-gateway
      namespace: openshift-ingress