apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: cilium-tls-gateway
  namespace: kube-system
  labels:
    app.kubernetes.io/name: tls-gateway
    app.kubernetes.io/instance: cilium
    app.kubernetes.io/part-of: cilium
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-issuer
spec:
  gatewayClassName: cilium
  listeners:
    - allowedRoutes:
        namespaces:
          from: All
      hostname: '*.alexlebens.net'
      name: http
      port: 80
      protocol: HTTP
    - allowedRoutes:
        namespaces:
          from: All
      hostname: '*.alexlebens.net'
      name: https
      port: 443
      protocol: HTTPS
      tls:
        certificateRefs:
          - group: ''
            kind: Secret
            name: https-gateway-cert
            namespace: kube-system
        mode: Terminate