fix(gateway): Create a separate Gateway for Proxmox TLS passthrough

apps/utility/proxmox/tls-route.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: proxmox
 spec:
   parentRefs:
-    - name: stonegarden
+    - name: proxmox-euclid
       namespace: gateway
   hostnames:
     - "proxmox.euclid.stonegarden.dev"

infra/gateway/gw-proxmox-euclid.yaml

@@ -0,0 +1,22 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: proxmox-euclid
+  namespace: gateway
+  annotations:
+    cert-manager.io/issuer: cloudflare-issuer
+spec:
+  gatewayClassName: cilium
+  infrastructure:
+    annotations:
+      io.cilium/lb-ipam-ips: 192.168.1.173
+  listeners:
+    - protocol: HTTPS
+      port: 443
+      name: proxmox-tls-passthrough
+      hostname: proxmox.euclid.stonegarden.dev
+      tls:
+        mode: Passthrough
+      allowedRoutes:
+        namespaces:
+          from: All

infra/gateway/kustomization.yaml

@@ -7,4 +7,5 @@ resources:
   - ns.yaml
   - cloudflare-api-token.yaml
   - cloudflare-issuer.yaml
-  - gw-stonegarden.yaml
+  - gw-stonegarden.yaml
+  - gw-proxmox-euclid.yaml

infra/net-aux/config/cloudflared/config.yaml

@@ -12,7 +12,7 @@ ingress:
   - hostname: ssh.stonegarden.dev
     service: ssh://192.168.1.50:22
   - hostname: proxmox.euclid.stonegarden.dev
-    service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
+    service: https://cilium-gateway-proxmox-euclid.gateway.svc.cluster.local:443
     originRequest:
       originServerName: proxmox.euclid.stonegarden.dev
   - hostname: haos.stonegarden.dev