disable cilium gateway
All checks were successful
lint-test-helm / lint-helm (push) Successful in 8s
lint-test-docker / lint-docker-compose (push) Successful in 20s
render-manifests-push / render-manifests-push (push) Successful in 1m9s
renovate / renovate (push) Successful in 1m52s

This commit is contained in:
2025-12-25 19:18:39 -06:00
parent 9a718514cb
commit 92b015a51d
7 changed files with 47 additions and 47 deletions

View File

@@ -1,35 +1,35 @@
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
name: cilium-tls-gateway
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: tls-gateway
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
annotations:
cert-manager.io/cluster-issuer: letsencrypt-issuer
spec:
gatewayClassName: cilium
listeners:
- allowedRoutes:
namespaces:
from: All
hostname: '*.alexlebens.net'
name: http
port: 80
protocol: HTTP
- allowedRoutes:
namespaces:
from: All
hostname: '*.alexlebens.net'
name: https
port: 443
protocol: HTTPS
tls:
certificateRefs:
- group: ''
kind: Secret
name: https-gateway-cert
namespace: kube-system
mode: Terminate
# apiVersion: gateway.networking.k8s.io/v1
# kind: Gateway
# metadata:
# name: cilium-tls-gateway
# namespace: {{ .Release.Namespace }}
# labels:
# app.kubernetes.io/name: tls-gateway
# app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# annotations:
# cert-manager.io/cluster-issuer: letsencrypt-issuer
# spec:
# gatewayClassName: cilium
# listeners:
# - allowedRoutes:
# namespaces:
# from: All
# hostname: '*.alexlebens.net'
# name: http
# port: 80
# protocol: HTTP
# - allowedRoutes:
# namespaces:
# from: All
# hostname: '*.alexlebens.net'
# name: https
# port: 443
# protocol: HTTPS
# tls:
# certificateRefs:
# - group: ''
# kind: Secret
# name: https-gateway-cert
# namespace: kube-system
# mode: Terminate

View File

@@ -11,15 +11,15 @@ spec:
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: cilium-tls-gateway
namespace: kube-system
name: traefik-gateway
namespace: traefik
hostnames:
- hubble.alexlebens.net
rules:
- matches:
- path:
type: PathPrefix
value: /hubble
value: /
backendRefs:
- group: ''
kind: Service

View File

@@ -42,7 +42,7 @@ cilium:
ingressController:
enabled: false
gatewayAPI:
enabled: true
enabled: false
enableAlpn: true
enableAppProtocol: true
externalIPs: