fix(gateway): Creating a TLS Passthrough listener

apps/utility/proxmox/tls-route.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: proxmox
 spec:
   parentRefs:
-    - name: euclid
+    - name: stonegarden
       namespace: gateway
   hostnames:
     - "proxmox.euclid.stonegarden.dev"

infra/gateway/gw-euclid.yaml

@@ -1,24 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: euclid
-  namespace: gateway
-  annotations:
-    cert-manager.io/issuer: cloudflare-issuer
-spec:
-  gatewayClassName: cilium
-  infrastructure:
-    annotations:
-      io.cilium/lb-ipam-ips: 192.168.1.173
-  listeners:
-    - protocol: HTTPS
-      port: 443
-      name: https-euclid
-      hostname: "*.euclid.stonegarden.dev"
-      tls:
-        certificateRefs:
-          - kind: Secret
-            name: cf-euclid-cert
-      allowedRoutes:
-        namespaces:
-          from: All

infra/gateway/gw-stonegarden.yaml

@@ -11,6 +11,15 @@ spec:
     annotations:
       io.cilium/lb-ipam-ips: 192.168.1.172
   listeners:
+    - protocol: HTTPS
+      port: 443
+      name: proxmox-tls-passthrough
+      hostname: proxmox.euclid.stonegarden.dev
+      tls:
+        mode: Passthrough
+      allowedRoutes:
+        namespaces:
+          from: All
     - protocol: HTTPS
       port: 443
       name: https-gateway

infra/gateway/kustomization.yaml

@@ -7,5 +7,4 @@ resources:
   - ns.yaml
   - cloudflare-api-token.yaml
   - cloudflare-issuer.yaml
-  - gw-stonegarden.yaml
-  - gw-euclid.yaml
+  - gw-stonegarden.yaml

infra/net-aux/config/cloudflared/config.yaml

@@ -12,7 +12,7 @@ ingress:
   - hostname: ssh.stonegarden.dev
     service: ssh://192.168.1.50:22
   - hostname: proxmox.euclid.stonegarden.dev
-    service: https://cilium-gateway-euclid.gateway.svc.cluster.local:443
+    service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
     originRequest:
       originServerName: proxmox.euclid.stonegarden.dev
   - hostname: haos.stonegarden.dev
@@ -27,10 +27,6 @@ ingress:
     service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
     originRequest:
       originServerName: gateway.stonegarden.dev
-  - hostname: hass.stonegarden.dev
-    service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
-    originRequest:
-      originServerName: hass.stonegarden.dev
   - hostname: remark42.stonegarden.dev
     service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
     originRequest: