move gateway

clusters/cl01tl/management/headlamp/templates/gateway.yaml

@@ -0,0 +1,36 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: headlamp-https-gateway
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: headlamp-https-gateway
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-issuer
+spec:
+  addresses:
+    - type: IPAddress
+      value: 10.232.1.23
+  gatewayClassName: cilium
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 443
+      hostname: headlamp.alexlebens.net
+      # allowedRoutes:
+      #   namespaces:
+      #     from: Selector
+      #     selector:
+      #       matchLabels:
+      #         https-gateway-access: "true"
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - group: ''
+            kind: Secret
+            name: https-gateway-headlamp-cert
+            namespace: headlamp

clusters/cl01tl/management/headlamp/templates/http-route.yaml

@@ -13,8 +13,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: https-gateway
-      namespace: kube-system
+      name: headlamp-https-gateway
+      namespace: headlamp
       sectionName: https
   hostnames:
     - headlamp.alexlebens.net