fix(gateway): Removed non-traefik-forward-auth protected Ingresses in favour of HTTPRoutes

apps/media/jellyfin/ingress.yaml

@@ -1,13 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: jellyfin-ingress
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`jellyfin.stonegarden.dev`)
-      kind: Rule
-      services:
-        - name: jellyfin-svc
-          port: 8096

apps/media/jellyfin/kustomization.yaml

@@ -19,5 +19,4 @@ resources:
   - pvc-jellyfin-media.yaml
   - service.yaml
   - deployment.yaml
-#  - ingress.yaml
   - http-route.yaml

apps/media/plex/ingress.yaml

@@ -1,13 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: ingressroute-plex
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`plex.stonegarden.dev`)
-      kind: Rule
-      services:
-        - name: plex
-          port: 32400

apps/media/plex/kustomization.yaml

@@ -19,5 +19,4 @@ resources:
   - pvc-plex-media.yaml
   - service.yaml
   - deployment.yaml
-#  - ingress.yaml
   - http-route.yaml

apps/public/blog/remark42/ingress-route.yaml

@@ -1,14 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: remark42
-  namespace: blog
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`remark42.stonegarden.dev`)
-      kind: Rule
-      services:
-        - name: remark42-web
-          port: http

apps/public/blog/remark42/kustomization.yaml

@@ -11,7 +11,6 @@ configMapGenerator:
 
 resources:
   - deployment.yaml
-#  - ingress-route.yaml
   - http-route.yaml
   - pv.yaml
   - pvc.yaml

apps/public/blog/values.yaml

@@ -8,5 +8,7 @@ env:
     value: Europe/Oslo
 service:
   containerPort: 80
+ingressRoute:
+  create: false
 auth:
   enabled: false

apps/public/stonegarden/ingress.yaml

@@ -1,13 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: stonegarden
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`stonegarden.dev`) || Host(`www.stonegarden.dev`)
-      kind: Rule
-      services:
-        - name: stonegarden
-          port: web

apps/public/stonegarden/kustomization.yaml

@@ -8,5 +8,4 @@ resources:
   - ns.yaml
   - service.yaml
   - deployment.yaml
-#  - ingress.yaml
   - http-route.yaml

apps/utility/home-assistant/http-route.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: hass-http-route
+spec:
+  parentRefs:
+    - name: cilium-gateway
+      namespace: gateway
+  hostnames:
+    - "hass.stonegarden.dev"
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: home-assistant
+          port: 8123

apps/utility/home-assistant/ingress.yaml

@@ -1,13 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: home-assistant
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`hass.stonegarden.dev`)
-      kind: Rule
-      services:
-        - name: home-assistant
-          port: 8123

apps/utility/home-assistant/kustomization.yaml

@@ -9,4 +9,4 @@ resources:
   - pvc-hass-config.yaml
   - service.yaml
   - deployment.yaml
-  - ingress.yaml
+  - http-route.yaml

infra/gateway/kustomization.yaml

@@ -3,7 +3,6 @@ kind: Kustomization
 
 resources:
   - https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.0.0/experimental-install.yaml
-#  - https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.0.0/standard-install.yaml
   - gateway-class.yaml
   - ns.yaml
   - cloudflare-api-token.yaml

infra/net-aux/config/cloudflared/config.yaml

@@ -31,9 +31,12 @@ ingress:
     service: https://cilium-gateway-cilium-gateway.gateway.svc.cluster.local:443
     originRequest:
       originServerName: gateway.stonegarden.dev
+  - hostname: hass.stonegarden.dev
+    service: https://cilium-gateway-cilium-gateway.gateway.svc.cluster.local:443
+    originRequest:
+      originServerName: hass.stonegarden.dev
   - hostname: stonegarden.dev
     service: https://cilium-gateway-cilium-gateway.gateway.svc.cluster.local:443
-    #service: https://traefik.traefik.svc.cluster.local:443
     originRequest:
       originServerName: stonegarden.dev
   - hostname: "*.stonegarden.dev"