fix(gateway): remove separate tls-passthrough gateway

It appears to work without a separate Gateway now. Should investigate if https://github.com/cilium/cilium/issues/32371 can be closed

Signed-off-by: Vegard Hagen <[email protected]>

k8s/apps/external/proxmox/tls-route.yaml

@@ -1,15 +1,11 @@
 apiVersion: gateway.networking.k8s.io/v1alpha2
 kind: TLSRoute
 metadata:
-  name: proxmox-tls
+  name: proxmox
   namespace: proxmox
 spec:
   parentRefs:
-    - name: tls-passthrough
-      namespace: gateway
-  hostnames:
-    - "proxmox.stonegarden.dev"
+    - { name: internal, namespace: gateway }
+  hostnames: [ proxmox.stonegarden.dev ]
   rules:
-    - backendRefs:
-        - name: proxmox
-          port: 443
+    - backendRefs: [ { name: proxmox, port: 443 } ]

k8s/apps/external/truenas/tls-route.yaml

@@ -5,11 +5,7 @@ metadata:
   namespace: truenas
 spec:
   parentRefs:
-    - name: tls-passthrough
-      namespace: gateway
-  hostnames:
-    - "truenas.stonegarden.dev"
+    - { name: internal, namespace: gateway }
+  hostnames: [ truenas.stonegarden.dev ]
   rules:
-    - backendRefs:
-        - name: truenas
-          port: 443
+    - backendRefs: [ { name: truenas, port: 443 } ]

k8s/infra/controllers/argocd/http-route.yaml

@@ -1,26 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: argocd
-  namespace: argocd
-spec:
-  parentRefs:
-    - name: internal
-      namespace: gateway
-  hostnames:
-    - "argocd.stonegarden.dev"
-  rules:
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /
-      backendRefs:
-        - name: argocd-server
-          port: 80
-#    - matches:
-#        - headers:
-#            - name: Content-Type
-#              value: application/grpc
-#      backendRefs:
-#        - name: argocd-server
-#          port: 80

k8s/infra/controllers/argocd/tls-route.yaml

@@ -5,11 +5,7 @@ metadata:
   namespace: argocd
 spec:
   parentRefs:
-    - name: internal
-      namespace: gateway
-  hostnames:
-    - "argocd.stonegarden.dev"
+    - { name: internal, namespace: gateway }
+  hostnames: [ argocd.stonegarden.dev ]
   rules:
-    - backendRefs:
-        - name: argocd-server
-          port: 443
+    - backendRefs: [ { name: argocd-server, port: 443 } ]

k8s/infra/network/gateway/gw-tls-passthrough.yaml

@@ -1,29 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: tls-passthrough
-  namespace: gateway
-spec:
-  gatewayClassName: cilium
-  infrastructure:
-    annotations:
-      io.cilium/lb-ipam-ips: 192.168.1.221
-  listeners:
-    - protocol: TLS
-      port: 443
-      name: proxmox
-      hostname: "proxmox.stonegarden.dev"
-      tls:
-        mode: Passthrough
-      allowedRoutes:
-        namespaces:
-          from: All
-    - protocol: TLS
-      port: 443
-      name: truenas
-      hostname: "truenas.stonegarden.dev"
-      tls:
-        mode: Passthrough
-      allowedRoutes:
-        namespaces:
-          from: All

k8s/infra/network/gateway/kustomization.yaml

@@ -7,4 +7,3 @@ resources:
   - ns.yaml
   - gw-external.yaml
   - gw-internal.yaml
-  - gw-tls-passthrough.yaml