# ------------------------------------------------------------------------------
# HTTPRoute — Grafana via Cilium Gateway
# ------------------------------------------------------------------------------
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: grafana-tls
  namespace: monitoring
spec:
  secretName: grafana-tls
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  dnsNames:
    - grafana.local.mk-labs.cloud
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: grafana
  namespace: monitoring
  annotations:
    external-dns.alpha.kubernetes.io/hostname: grafana.local.mk-labs.cloud
    external-dns.alpha.kubernetes.io/target: "10.1.71.90"
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: fastpass-gateway
      namespace: gateway
      sectionName: https
  hostnames:
    - grafana.local.mk-labs.cloud
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: /
      backendRefs:
        - group: ""
          kind: Service
          name: monitoring-grafana
          port: 80
          weight: 1