apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: https-gateway
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: https-gateway
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/version: {{ .Chart.AppVersion }}
    app.kubernetes.io/component: web
    app.kubernetes.io/part-of: {{ .Release.Name }}
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-issuer
spec:
  addresses:
    - type: IPAddress
      value: 10.232.1.23
  gatewayClassName: cilium
  listeners:
    - name: https
      protocol: HTTPS
      port: 443
      hostname: "*.alexlebens.net"
      allowedRoutes:
        namespaces:
          from: Selector
          selector:
            matchLabels:
              https-gateway-access: "true"
      tls:
        mode: Terminate
        certificateRefs:
          - group: ''
            kind: Secret
            name: https-gateway-cert
            namespace: kube-system