commit b5cc7b3b677135325a7e3f1c09458dcbce5eb7b9 parent 8678822daba131920f52f968a70b864cb08e4a27 Author: MTRNord <mtrnord1@gmail.com> Date: Wed, 15 Jan 2025 11:55:57 +0100 Set up basic gateway Diffstat:
| M | apps/base/envoy-gateway/release.yaml | | | 21 | ++++++++++++++++++++- |
1 file changed, 20 insertions(+), 1 deletion(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -22,7 +22,6 @@ metadata: namespace: envoy-gateway spec: controllerName: gateway.envoyproxy.io/gatewayclass-controller -# TODO: Set up https://gateway.envoyproxy.io/docs/tasks/security/tls-cert-manager/#creating-a-tls-gateway-listener with https://github.com/hetznercloud/hcloud-cloud-controller-manager/issues/814 --- apiVersion: gateway.networking.k8s.io/v1 kind: Gateway @@ -33,6 +32,13 @@ metadata: cert-manager.io/cluster-issuer: letsencrypt-prod spec: gatewayClassName: envoy-gateway-class + infrastructure: + annotations: + external-dns.alpha.kubernetes.io/access: public + load-balancer.hetzner.cloud/location: hel1 + load-balancer.hetzner.cloud/name: envoy + load-balancer.hetzner.cloud/use-private-ip: "true" + load-balancer.hetzner.cloud/uses-proxyprotocol: "true" listeners: - name: http protocol: HTTP @@ -51,3 +57,16 @@ spec: certificateRefs: - kind: Secret name: envoy-gateway-tls +--- +apiVersion: gateway.envoyproxy.io/v1alpha1 +kind: ClientTrafficPolicy +metadata: + name: enable-proxy-protocol-policy + namespace: envoy-gateway +spec: + targetRef: + group: gateway.networking.k8s.io + kind: Gateway + name: envoy-gateway + namespace: envoy-gateway + enableProxyProtocol: true