migration to next

clusters/cl01tl/standalone/cilium/templates/gateway.yaml

@@ -1,36 +1,43 @@
-# apiVersion: gateway.networking.k8s.io/v1
-# kind: Gateway
-# metadata:
-#   name: https-gateway
-#   namespace: {{ .Release.Namespace }}
-#   labels:
-#     app.kubernetes.io/name: https-gateway
-#     app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/version: {{ .Chart.AppVersion }}
-#     app.kubernetes.io/component: web
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
-#   annotations:
-#     cert-manager.io/cluster-issuer: letsencrypt-issuer
-# spec:
-#   addresses:
-#     - type: IPAddress
-#       value: 10.232.1.23
-#   gatewayClassName: cilium
-#   listeners:
-#     - name: https
-#       protocol: HTTPS
-#       port: 443
-#       hostname: "*.alexlebens.net"
-#       allowedRoutes:
-#         namespaces:
-#           from: Selector
-#           selector:
-#             matchLabels:
-#               https-gateway-access: "true"
-#       tls:
-#         mode: Terminate
-#         certificateRefs:
-#           - group: ''
-#             kind: Secret
-#             name: https-gateway-cert
-#             namespace: kube-system
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: http-gateway
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: http-gateway
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+  # annotations:
+  #   cert-manager.io/cluster-issuer: letsencrypt-issuer
+spec:
+  addresses:
+    - type: IPAddress
+      value: 10.232.1.23
+  gatewayClassName: cilium
+  listeners:
+    - name: http
+      protocol: HTTP
+      port: 80
+      hostname: "*.alexlebens.net"
+      allowedRoutes:
+        namespaces:
+          from: All
+    # - name: https
+    #   protocol: HTTPS
+    #   port: 443
+    #   hostname: "*.alexlebens.net"
+    #   allowedRoutes:
+    #     namespaces:
+    #       from: Selector
+    #       selector:
+    #         matchLabels:
+    #           https-gateway-access: "true"
+    #   tls:
+    #     mode: Terminate
+    #     certificateRefs:
+    #       - group: ''
+    #         kind: Secret
+    #         name: https-gateway-cert
+    #         namespace: cilium-secrets

clusters/cl01tl/standalone/cilium/values.yaml

@@ -27,18 +27,20 @@ cilium:
         - SYS_RESOURCE
   l2announcements:
     enabled: true
+  devices: enp6s0
   enableK8sEndpointSlice: true
   ciliumEndpointSlice:
     enabled: true
   ingressController:
     enabled: false
-    loadbalancerMode: shared
+  gatewayAPI:
+    enabled: true
+    enableAlpn: true
+    enableAppProtocol: true
     secretsNamespace:
       create: true
       name: cilium-secrets
       sync: true
-  gatewayAPI:
-    enabled: false
   externalIPs:
     enabled: true
   socketLB: