Rewrite Gateway

Author: jonakoudijs

infrastructure/modules/cloudijs-system/charts/gateway/Chart.yaml

@@ -1,4 +1,4 @@
 apiVersion: v2
 name: gateway-config
 type: application
-version: 1.0.4
+version: 1.0.5

infrastructure/modules/cloudijs-system/charts/gateway/templates/gateway.yaml

@@ -15,18 +15,6 @@ spec:
     - name: http
       port: 80
       protocol: HTTP
-      allowedRoutes:
-        namespaces:
-          from: All
-    - name: https
-      port: 443
-      protocol: HTTPS
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - kind: Secret
-            group: ""
-            name: shared-gateway-cert
       allowedRoutes:
         namespaces:
           from: All

services/apps/sample-nginx/gateway.yaml

@@ -1,47 +1,12 @@
 apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: sample-nginx-gateway
-  namespace: apps
-  annotations:
-    cert-manager.io/issuer: sample-nginx-issuer
-spec:
-  gatewayClassName: cilium
-  infrastructure:
-    annotations:
-      load-balancer.hetzner.cloud/name: "platform-gateway"
-      load-balancer.hetzner.cloud/location: "nbg1"
-      load-balancer.hetzner.cloud/uses-proxyprotocol: "true"
-  listeners:
-    - name: http
-      hostname: test.cloudijs.nl
-      port: 80
-      protocol: HTTP
-      allowedRoutes:
-        namespaces:
-          from: Same
-    - name: https
-      hostname: test.cloudijs.nl
-      port: 443
-      protocol: HTTPS
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - name: test-cloudijs-nl-tls
-            kind: Secret
-            group: ""
-      allowedRoutes:
-        namespaces:
-          from: Same
----
-apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
   name: sample-nginx
   namespace: apps
 spec:
   parentRefs:
     - name: sample-nginx-gateway
+      namespace: cloudijs-system
   rules:
     - matches:
         - path:

services/cluster/gateway/gateway.yaml

@@ -0,0 +1,35 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: shared-gateway-http
+  namespace: cloudijs-system
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-http
+spec:
+  gatewayClassName: cilium
+  infrastructure:
+    annotations:
+      load-balancer.hetzner.cloud/name: "platform-gateway"
+      load-balancer.hetzner.cloud/location: "nbg1"
+      load-balancer.hetzner.cloud/uses-proxyprotocol: "true"
+  listeners:
+    - name: http
+      hostname: test.cloudijs.nl
+      port: 80
+      protocol: HTTP
+      allowedRoutes:
+        namespaces:
+          from: All
+    - name: https
+      hostname: test.cloudijs.nl
+      port: 443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: test-cloudijs-nl-tls
+            kind: Secret
+            group: ""
+      allowedRoutes:
+        namespaces:
+          from: All

services/cluster/gateway/issuer.yaml

@@ -0,0 +1,17 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-http
+  namespace: cloudijs-system
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-http-key
+    solvers:
+      - http01:
+          gatewayHTTPRoute:
+            parentRefs:
+              - name: shared-gateway-http
+                namespace: cloudijs-system
+                kind: Gateway

services/cluster/gateway/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - gateway.yaml
+  - issuer.yaml

services/cluster/kustomization.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - gateway
   - pocket-id
   - sealed-secrets

services/cluster/pocket-id/kustomization.yaml

@@ -1,4 +1,3 @@
----
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources: