deploy gateway into single cilium instance

clusters/cl01tl/platform/authentik/templates/http-route.yaml

@@ -13,7 +13,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: authentik-tls-gateway
+      name: cilium-tls-gateway
+      namespace: kube-system
       sectionName: https
   hostnames:
     - auth.alexlebens.net
@@ -49,7 +50,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: authentik-tls-gateway
+      name: cilium-tls-gateway
+      namespace: kube-system
       sectionName: http
   hostnames:
     - auth.alexlebens.net

clusters/cl01tl/standalone/cilium/templates/certificate.yaml

@@ -19,4 +19,3 @@ spec:
     name: letsencrypt-issuer
     kind: ClusterIssuer
   commonName: "*.alexlebens.net"
-

clusters/cl01tl/standalone/cilium/templates/gateway.yaml

@@ -1,10 +1,10 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
 metadata:
-  name: authentik-tls-gateway
+  name: cilium-tls-gateway
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: authentik-tls-gateway
+    app.kubernetes.io/name: cilium-tls-gateway
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/version: {{ .Chart.AppVersion }}
     app.kubernetes.io/component: network
@@ -21,6 +21,9 @@ spec:
       protocol: HTTPS
       port: 443
       hostname: "*.alexlebens.net"
+      allowedRoutes:
+        namespaces:
+          from: All
       tls:
         mode: Terminate
         certificateRefs: