From ade761cc850235135debc434d743a11add584bdf Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Wed, 25 Feb 2026 17:08:38 -0600
Subject: [PATCH] feat: add reference grant

---
 .../authentik/templates/reference-grant.yaml   | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 clusters/cl01tl/helm/authentik/templates/reference-grant.yaml

diff --git a/clusters/cl01tl/helm/authentik/templates/reference-grant.yaml b/clusters/cl01tl/helm/authentik/templates/reference-grant.yaml
new file mode 100644
index 000000000..e4b210d6d
--- /dev/null
+++ b/clusters/cl01tl/helm/authentik/templates/reference-grant.yaml
@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-outpost-cross-namespace-access
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: allow-outpost-cross-namespace-access
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      namespace: sonarr-4k
+  to:
+    - group: ""
+      kind: Service
+      name: ak-outpost-traefik-proxy-auth