alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

enable gateway

Browse Source
This commit is contained in:
Alex Lebens
2024-08-22 13:05:44 -05:00
parent e71fba7abe
commit e3293998ba
3 changed files with 46 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
clusters/cl01tl/standalone/cilium/templates/certificate.yaml
View File

@@ -1,21 +1,22 @@
# apiVersion: cert-manager.io/v1 apiVersion: cert-manager.io/v1
# kind: Certificate kind: Certificate
# metadata: metadata:
# name: wildcard-tls-alexlebens-net name: wildcard-tls-alexlebens-net
# namespace: cilium namespace: cilium
# labels: labels:
# app.kubernetes.io/name: wildcard-tls-alexlebens-net app.kubernetes.io/name: wildcard-tls-alexlebens-net
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: network app.kubernetes.io/component: network
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretName: wildcard-tls-alexlebens-net secretName: wildcard-tls-alexlebens-net
# duration: 2160h0m0s duration: 2160h0m0s
# renewBefore: 360h0m0s renewBefore: 360h0m0s
# dnsNames: dnsNames:
# - "*.alexlebens.net" - "alexlebens.net"
# issuerRef: - "*.alexlebens.net"
# name: letsencrypt-issuer issuerRef:
# kind: ClusterIssuer name: letsencrypt-issuer
# commonName: "*.alexlebens.net" kind: ClusterIssuer
commonName: "*.alexlebens.net"

62
clusters/cl01tl/standalone/cilium/templates/gateway.yaml
View File

@@ -1,39 +1,23 @@
# apiVersion: gateway.networking.k8s.io/v1 apiVersion: gateway.networking.k8s.io/v1
# kind: Gateway kind: Gateway
# metadata: metadata:
# name: cilium-tls-gateway name: cilium-http-gateway
# namespace: cilium namespace: cilium
# labels: labels:
# app.kubernetes.io/name: cilium-tls-gateway app.kubernetes.io/name: cilium-http-gateway
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: network app.kubernetes.io/component: network
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# annotations: annotations:
# cert-manager.io/cluster-issuer: letsencrypt-issuer cert-manager.io/cluster-issuer: letsencrypt-issuer
# spec: spec:
# gatewayClassName: cilium gatewayClassName: cilium
# infrastructure: listeners:
# annotations: - name: http
# io.cilium/lb-ipam-ips: 192.168.1.15 protocol: HTTP
# listeners: port: 80
# - name: http hostname: "*.alexlebens.net"
# protocol: HTTP allowedRoutes:
# port: 80 namespaces:
# hostname: "*.alexlebens.net" from: All
# allowedRoutes:
# namespaces:
# from: All
# - name: https
# protocol: HTTPS
# port: 443
# hostname: "*.alexlebens.net"
# allowedRoutes:
# namespaces:
# from: All
# tls:
# mode: Terminate
# certificateRefs:
# - kind: Secret
# group: core
# name: wildcard-tls-alexlebens-net

2
clusters/cl01tl/standalone/cilium/values.yaml
View File

@@ -31,7 +31,7 @@ cilium:
ingressController: ingressController:
enabled: false enabled: false
gatewayAPI: gatewayAPI:
enabled: false enabled: true
hubble: hubble:
enabled: true enabled: true
metrics: metrics: