disable cilium gateway

clusters/cl01tl/helm/argo-workflows/templates/http-route.yaml

@@ -11,8 +11,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: cilium-tls-gateway
-      namespace: kube-system
+      name: traefik-gateway
+      namespace: traefik
   hostnames:
     - argo-workflows.alexlebens.net
   rules:

clusters/cl01tl/helm/blocky/values.yaml

@@ -103,7 +103,7 @@ blocky:
               ;; Application Names
               actual                          IN      CNAME   traefik-cl01tl
               alertmanager                    IN      CNAME   traefik-cl01tl
-              argo-workflows                  IN      CNAME   cilium-cl01tl
+              argo-workflows                  IN      CNAME   traefik-cl01tl
               argocd                          IN      CNAME   traefik-cl01tl
               audiobookshelf                  IN      CNAME   traefik-cl01tl
               authentik                       IN      CNAME   traefik-cl01tl
@@ -124,7 +124,7 @@ blocky:
               home                            IN      CNAME   traefik-cl01tl
               home-assistant                  IN      CNAME   traefik-cl01tl
               home-assistant-code-server      IN      CNAME   traefik-cl01tl
-              hubble                          IN      CNAME   cilium-cl01tl
+              hubble                          IN      CNAME   traefik-cl01tl
               huntarr                         IN      CNAME   traefik-cl01tl
               immich                          IN      CNAME   traefik-cl01tl
               jellyfin                        IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -1,35 +1,35 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: cilium-tls-gateway
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: tls-gateway
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-issuer
-spec:
-  gatewayClassName: cilium
-  listeners:
-    - allowedRoutes:
-        namespaces:
-          from: All
-      hostname: '*.alexlebens.net'
-      name: http
-      port: 80
-      protocol: HTTP
-    - allowedRoutes:
-        namespaces:
-          from: All
-      hostname: '*.alexlebens.net'
-      name: https
-      port: 443
-      protocol: HTTPS
-      tls:
-        certificateRefs:
-          - group: ''
-            kind: Secret
-            name: https-gateway-cert
-            namespace: kube-system
-        mode: Terminate
+# apiVersion: gateway.networking.k8s.io/v1
+# kind: Gateway
+# metadata:
+#   name: cilium-tls-gateway
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: tls-gateway
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+#   annotations:
+#     cert-manager.io/cluster-issuer: letsencrypt-issuer
+# spec:
+#   gatewayClassName: cilium
+#   listeners:
+#     - allowedRoutes:
+#         namespaces:
+#           from: All
+#       hostname: '*.alexlebens.net'
+#       name: http
+#       port: 80
+#       protocol: HTTP
+#     - allowedRoutes:
+#         namespaces:
+#           from: All
+#       hostname: '*.alexlebens.net'
+#       name: https
+#       port: 443
+#       protocol: HTTPS
+#       tls:
+#         certificateRefs:
+#           - group: ''
+#             kind: Secret
+#             name: https-gateway-cert
+#             namespace: kube-system
+#         mode: Terminate

clusters/cl01tl/helm/cilium/templates/http-route.yaml

@@ -11,15 +11,15 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: cilium-tls-gateway
-      namespace: kube-system
+      name: traefik-gateway
+      namespace: traefik
   hostnames:
     - hubble.alexlebens.net
   rules:
     - matches:
       - path:
           type: PathPrefix
-          value: /hubble
+          value: /
       backendRefs:
         - group: ''
           kind: Service

clusters/cl01tl/helm/cilium/values.yaml

@@ -42,7 +42,7 @@ cilium:
   ingressController:
     enabled: false
   gatewayAPI:
-    enabled: true
+    enabled: false
     enableAlpn: true
     enableAppProtocol: true
   externalIPs:

hosts/ps08rp/blocky/config.yml

@@ -79,7 +79,7 @@ customDNS:
     ;; Application Names
     actual                          IN      CNAME   traefik-cl01tl
     alertmanager                    IN      CNAME   traefik-cl01tl
-    argo-workflows                  IN      CNAME   cilium-cl01tl
+    argo-workflows                  IN      CNAME   traefik-cl01tl
     argocd                          IN      CNAME   traefik-cl01tl
     audiobookshelf                  IN      CNAME   traefik-cl01tl
     authentik                       IN      CNAME   traefik-cl01tl
@@ -100,7 +100,7 @@ customDNS:
     home                            IN      CNAME   traefik-cl01tl
     home-assistant                  IN      CNAME   traefik-cl01tl
     home-assistant-code-server      IN      CNAME   traefik-cl01tl
-    hubble                          IN      CNAME   cilium-cl01tl
+    hubble                          IN      CNAME   traefik-cl01tl
     huntarr                         IN      CNAME   traefik-cl01tl
     immich                          IN      CNAME   traefik-cl01tl
     jellyfin                        IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -79,7 +79,7 @@ customDNS:
     ;; Application Names
     actual                          IN      CNAME   traefik-cl01tl
     alertmanager                    IN      CNAME   traefik-cl01tl
-    argo-workflows                  IN      CNAME   cilium-cl01tl
+    argo-workflows                  IN      CNAME   traefik-cl01tl
     argocd                          IN      CNAME   traefik-cl01tl
     audiobookshelf                  IN      CNAME   traefik-cl01tl
     authentik                       IN      CNAME   traefik-cl01tl
@@ -100,7 +100,7 @@ customDNS:
     home                            IN      CNAME   traefik-cl01tl
     home-assistant                  IN      CNAME   traefik-cl01tl
     home-assistant-code-server      IN      CNAME   traefik-cl01tl
-    hubble                          IN      CNAME   cilium-cl01tl
+    hubble                          IN      CNAME   traefik-cl01tl
     huntarr                         IN      CNAME   traefik-cl01tl
     immich                          IN      CNAME   traefik-cl01tl
     jellyfin                        IN      CNAME   traefik-cl01tl