deploy gateway into single cilium instance

clusters/cl01tl/platform/authentik/templates/gateway.yaml

@@ -1,30 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: authentik-tls-gateway
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: authentik-tls-gateway
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: network
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-issuer
-spec:
-  gatewayClassName: cilium
-  listeners:
-    - name: http
-      protocol: HTTP
-      port: 80
-    - name: https
-      protocol: HTTPS
-      port: 443
-      hostname: "*.alexlebens.net"
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - kind: Secret
-            group: ''
-            name: wildcard-tls-alexlebens-net
-            namespace: cilium-secrets

clusters/cl01tl/platform/authentik/templates/http-route.yaml

@@ -13,7 +13,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: authentik-tls-gateway
+      name: cilium-tls-gateway
+      namespace: kube-system
       sectionName: https
   hostnames:
     - auth.alexlebens.net
@@ -49,7 +50,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: authentik-tls-gateway
+      name: cilium-tls-gateway
+      namespace: kube-system
       sectionName: http
   hostnames:
     - auth.alexlebens.net