Files
homelab-v/k8s/infra/network/gateway/gw-internal.yaml
T
Vegard Hagen ee41262cc2 feat(bgp): enable bgp in cilium and disable l2 announcements
Change IP of all LB Services to a different subnet

Use externalTrafficPolicy on some LB Services

Signed-off-by: Vegard Hagen <[email protected]>
2025-11-16 18:59:51 +01:00

47 lines
1.0 KiB
YAML

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
name: internal
namespace: gateway
spec:
gatewayClassName: cilium
infrastructure:
labels:
bgp.cilium.io/advertise-service: default
bgp.cilium.io/ip-pool: default
addresses:
- type: IPAddress
value: 172.20.10.100
listeners:
- protocol: TLS
port: 443
name: tls-passthrough
hostname: "*.stonegarden.dev"
tls:
mode: Passthrough
allowedRoutes:
namespaces:
from: All
- protocol: HTTPS
port: 443
name: https-gateway
hostname: "*.stonegarden.dev"
tls:
certificateRefs:
- kind: Secret
name: cert-stonegarden
allowedRoutes:
namespaces:
from: All
- protocol: HTTPS
port: 443
name: https-domain-gateway
hostname: stonegarden.dev
tls:
certificateRefs:
- kind: Secret
name: cert-stonegarden
allowedRoutes:
namespaces:
from: All