infra: configure envoy gateway with cert-manager support

.holo/branches/k8s-manifests/infra/envoy-gateway-crds.toml

@@ -0,0 +1,4 @@
+[holomapping]
+holosource = "envoy-gateway-chart"
+root = "charts/gateway-crds-helm"
+files = "**"

.holo/branches/k8s-manifests/infra/envoy-gateway.toml

@@ -0,0 +1,4 @@
+[holomapping]
+holosource = "envoy-gateway-chart"
+root = "charts/gateway-helm"
+files = "**"

.holo/branches/k8s-manifests/infra/gateway-api-crds.toml

@@ -0,0 +1,4 @@
+[holomapping]
+holosource = "gateway-api-crds"
+root = "config/crd/standard"
+files = "*.yaml"

.holo/lenses/envoy-gateway-crds.toml

@@ -0,0 +1,17 @@
+[hololens]
+container = "ghcr.io/hologit/lenses/helm3:latest"
+
+[hololens.input]
+root = "infra/envoy-gateway-crds"
+files = "**"
+
+[hololens.output]
+merge = "replace"
+
+[hololens.helm]
+release_name = "eg-crds"
+
+chart_path = "helm-chart"
+value_files = [
+    "release-values.yaml"
+]

.holo/lenses/envoy-gateway.toml

@@ -0,0 +1,18 @@
+[hololens]
+container = "ghcr.io/hologit/lenses/helm3:latest"
+
+[hololens.input]
+root = "infra/envoy-gateway"
+files = "**"
+
+[hololens.output]
+merge = "replace"
+
+[hololens.helm]
+namespace = "envoy-gateway-system"
+release_name = "eg"
+
+chart_path = "helm-chart"
+value_files = [
+    "release-values.yaml"
+]

.holo/sources/envoy-gateway-chart.toml

@@ -0,0 +1,3 @@
+[holosource]
+url = "https://github.com/envoyproxy/gateway.git"
+ref = "refs/tags/v1.7.0"

.holo/sources/gateway-api-crds.toml

@@ -0,0 +1,3 @@
+[holosource]
+url = "https://github.com/kubernetes-sigs/gateway-api.git"
+ref = "refs/tags/v1.5.0"

balancer/kustomization.yaml

@@ -7,29 +7,31 @@ resources:
   - manifests/namespace.yaml
   - manifests/deployment.yaml
   - manifests/service.yaml
-  - manifests/ingress.yaml
+  - manifests/gateway-listeners.yaml
+  - manifests/httproute.yaml
 
 images:
   - name: ghcr.io/codeforphilly/balancer-main/app
     newTag: "0.0.0-dev.20260211012449"
 
 patches:
   - target:
-      kind: Ingress
-      name: balancer
+      kind: ListenerSet
+      name: balancer-listeners
     patch: |-
-      - op: add
-        path: /metadata/annotations/cert-manager.io~1cluster-issuer
-        value: letsencrypt-prod
-      - op: add
-        path: /metadata/annotations/kubernetes.io~1ingress.class
-        value: nginx
       - op: replace
-        path: /spec/tls/0/hosts/0
+        path: /spec/listeners/0/hostname
         value: sandbox.balancerproject.org
       - op: replace
-        path: /spec/rules/0/host
+        path: /spec/listeners/1/hostname
         value: sandbox.balancerproject.org
+  - target:
+      kind: HTTPRoute
+      name: balancer
+    patch: |-
+      - op: add
+        path: /spec/hostnames
+        value: ["sandbox.balancerproject.org"]
   - target:
       kind: Namespace
       name: balancer

infra/envoy-gateway-crds/release-values.yaml

@@ -0,0 +1,2 @@
+# Default values for Envoy Gateway CRDs
+# See https://github.com/envoyproxy/gateway/blob/main/charts/gateway-crds-helm/values.yaml

infra/envoy-gateway-manifests/gateway-class.yaml

@@ -0,0 +1,6 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: GatewayClass
+metadata:
+  name: envoy
+spec:
+  controllerName: gateway.envoyproxy.io/gatewayclass-controller

infra/envoy-gateway-manifests/gateway.yaml

@@ -0,0 +1,11 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: main-gateway
+  namespace: envoy-gateway-system
+spec:
+  gatewayClassName: envoy
+  allowedListeners:
+    namespaces:
+      from: All
+  listeners: []

infra/envoy-gateway/release-values.yaml

@@ -0,0 +1,2 @@
+# Default values for Envoy Gateway
+# See https://github.com/envoyproxy/gateway/blob/main/charts/gateway/values.yaml