- Shipped
- April 26, 2026 at 5:00 PM UTC
- Author
- Kamo
- Commit
- 79d1863
Asterisk's chan_pjsip now binds a plain WebSocket transport on 0.0.0.0:8089 and Traefik terminates TLS at **************** (port 443) so kamo-internal can register browser softphones over the existing wildcard cert without managing certs inside the pod. - configmap-k1m1.yaml: startup.sh writes pjsip.transports_custom.conf with the WS transport and pjsip.endpoint_custom_post.conf with webrtc=yes overrides for the existing extensions (8080, 2523), pinned to the WS transport. - service.yaml: expose port 8089 (sip-ws) on the freepbx Service so the new IngressRoute can target it; the pod is on hostNetwork so this maps to the k1m1 host's port 8089. - ingressroute-ws.yaml: HostRegexp + PathPrefix(/ws) at priority 100 routes WebSocket upgrades to freepbx:8089 *without* the kamo-middlewares chain — that chain includes compress, which would corrupt SIP-over-WS frames.