From fe9ab18ed0a97e33176cb9ee447cb37f4e45e2a3 Mon Sep 17 00:00:00 2001
From: Vegard Hagen <vegard@stonegarden.dev>
Date: Sat, 2 Mar 2024 16:25:14 +0100
Subject: [PATCH] fix(gateway): Creating a TLS Passthrough listener

---
 apps/utility/proxmox/tls-route.yaml          |  2 +-
 infra/gateway/gw-euclid.yaml                 | 24 --------------------
 infra/gateway/gw-stonegarden.yaml            |  9 ++++++++
 infra/gateway/kustomization.yaml             |  3 +--
 infra/net-aux/config/cloudflared/config.yaml |  6 +----
 5 files changed, 12 insertions(+), 32 deletions(-)
 delete mode 100644 infra/gateway/gw-euclid.yaml

diff --git a/apps/utility/proxmox/tls-route.yaml b/apps/utility/proxmox/tls-route.yaml
index ea913f3..2f6c7f9 100644
--- a/apps/utility/proxmox/tls-route.yaml
+++ b/apps/utility/proxmox/tls-route.yaml
@@ -5,7 +5,7 @@ metadata:
   namespace: proxmox
 spec:
   parentRefs:
-    - name: euclid
+    - name: stonegarden
       namespace: gateway
   hostnames:
     - "proxmox.euclid.stonegarden.dev"
diff --git a/infra/gateway/gw-euclid.yaml b/infra/gateway/gw-euclid.yaml
deleted file mode 100644
index a405096..0000000
--- a/infra/gateway/gw-euclid.yaml
+++ /dev/null
@@ -1,24 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: euclid
-  namespace: gateway
-  annotations:
-    cert-manager.io/issuer: cloudflare-issuer
-spec:
-  gatewayClassName: cilium
-  infrastructure:
-    annotations:
-      io.cilium/lb-ipam-ips: 192.168.1.173
-  listeners:
-    - protocol: HTTPS
-      port: 443
-      name: https-euclid
-      hostname: "*.euclid.stonegarden.dev"
-      tls:
-        certificateRefs:
-          - kind: Secret
-            name: cf-euclid-cert
-      allowedRoutes:
-        namespaces:
-          from: All
\ No newline at end of file
diff --git a/infra/gateway/gw-stonegarden.yaml b/infra/gateway/gw-stonegarden.yaml
index 1c9c9ce..a27e29f 100644
--- a/infra/gateway/gw-stonegarden.yaml
+++ b/infra/gateway/gw-stonegarden.yaml
@@ -11,6 +11,15 @@ spec:
     annotations:
       io.cilium/lb-ipam-ips: 192.168.1.172
   listeners:
+    - protocol: HTTPS
+      port: 443
+      name: proxmox-tls-passthrough
+      hostname: proxmox.euclid.stonegarden.dev
+      tls:
+        mode: Passthrough
+      allowedRoutes:
+        namespaces:
+          from: All
     - protocol: HTTPS
       port: 443
       name: https-gateway
diff --git a/infra/gateway/kustomization.yaml b/infra/gateway/kustomization.yaml
index 58d9426..d2c054a 100644
--- a/infra/gateway/kustomization.yaml
+++ b/infra/gateway/kustomization.yaml
@@ -7,5 +7,4 @@ resources:
   - ns.yaml
   - cloudflare-api-token.yaml
   - cloudflare-issuer.yaml
-  - gw-stonegarden.yaml
-  - gw-euclid.yaml
\ No newline at end of file
+  - gw-stonegarden.yaml
\ No newline at end of file
diff --git a/infra/net-aux/config/cloudflared/config.yaml b/infra/net-aux/config/cloudflared/config.yaml
index 30d96a9..a18c624 100644
--- a/infra/net-aux/config/cloudflared/config.yaml
+++ b/infra/net-aux/config/cloudflared/config.yaml
@@ -12,7 +12,7 @@ ingress:
   - hostname: ssh.stonegarden.dev
     service: ssh://192.168.1.50:22
   - hostname: proxmox.euclid.stonegarden.dev
-    service: https://cilium-gateway-euclid.gateway.svc.cluster.local:443
+    service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
     originRequest:
       originServerName: proxmox.euclid.stonegarden.dev
   - hostname: haos.stonegarden.dev
@@ -27,10 +27,6 @@ ingress:
     service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
     originRequest:
       originServerName: gateway.stonegarden.dev
-  - hostname: hass.stonegarden.dev
-    service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
-    originRequest:
-      originServerName: hass.stonegarden.dev
   - hostname: remark42.stonegarden.dev
     service: https://cilium-gateway-stonegarden.gateway.svc.cluster.local:443
     originRequest: