diff --git a/apps/utility/proxmox/kustomization.yaml b/apps/utility/proxmox/kustomization.yaml index 2ab0b87..a1e4326 100644 --- a/apps/utility/proxmox/kustomization.yaml +++ b/apps/utility/proxmox/kustomization.yaml @@ -4,4 +4,5 @@ kind: Kustomization resources: - ns.yaml - svc.yaml - - endpoint-slice.yaml \ No newline at end of file + - endpoint-slice.yaml + - tls-route.yaml \ No newline at end of file diff --git a/apps/utility/proxmox/svc.yaml b/apps/utility/proxmox/svc.yaml index 7b60734..9a09555 100644 --- a/apps/utility/proxmox/svc.yaml +++ b/apps/utility/proxmox/svc.yaml @@ -1,7 +1,7 @@ apiVersion: v1 kind: Service metadata: - name: euclid + name: proxmox-euclid namespace: proxmox spec: ports: diff --git a/apps/utility/proxmox/tls-route.yaml b/apps/utility/proxmox/tls-route.yaml new file mode 100644 index 0000000..c74d5c9 --- /dev/null +++ b/apps/utility/proxmox/tls-route.yaml @@ -0,0 +1,15 @@ +apiVersion: gateway.networking.k8s.io/v1alpha2 +kind: TLSRoute +metadata: + name: euclid + namespace: proxmox +spec: + parentRefs: + - name: proxmox-euclid + namespace: gateway + hostnames: + - "proxmox.euclid.stonegarden.dev" + rules: + - backendRefs: + - name: proxmox-euclid + port: 443 \ No newline at end of file diff --git a/infra/gateway/gw-proxmox-euclid.yaml b/infra/gateway/gw-proxmox-euclid.yaml new file mode 100644 index 0000000..f900ff3 --- /dev/null +++ b/infra/gateway/gw-proxmox-euclid.yaml @@ -0,0 +1,20 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: Gateway +metadata: + name: proxmox-euclid + namespace: gateway +spec: + gatewayClassName: cilium + infrastructure: + annotations: + io.cilium/lb-ipam-ips: 192.168.1.173 + listeners: + - protocol: TLS + port: 443 + name: proxmox-tls-passthrough + hostname: proxmox.euclid.stonegarden.dev + tls: + mode: Passthrough + allowedRoutes: + namespaces: + from: All \ No newline at end of file diff --git a/infra/gateway/kustomization.yaml b/infra/gateway/kustomization.yaml index d2c054a..acaf526 100644 --- a/infra/gateway/kustomization.yaml +++ b/infra/gateway/kustomization.yaml @@ -7,4 +7,5 @@ resources: - ns.yaml - cloudflare-api-token.yaml - cloudflare-issuer.yaml - - gw-stonegarden.yaml \ No newline at end of file + - gw-stonegarden.yaml + - gw-proxmox-euclid.yaml \ No newline at end of file diff --git a/infra/net-aux/config/cloudflared/config.yaml b/infra/net-aux/config/cloudflared/config.yaml index d46deea..64c5e7e 100644 --- a/infra/net-aux/config/cloudflared/config.yaml +++ b/infra/net-aux/config/cloudflared/config.yaml @@ -12,7 +12,7 @@ ingress: - hostname: ssh.stonegarden.dev service: ssh://192.168.1.50:22 - hostname: proxmox.euclid.stonegarden.dev - service: https://euclid.proxmox.svc.cluster.local:443 + service: https://cilium-gateway-proxmox-euclid.gateway.svc.cluster.local:443 originRequest: originServerName: proxmox.euclid.stonegarden.dev - hostname: haos.stonegarden.dev