# ------------------------------------------------------------------------------
# HTTPRoute — Grafana via Cilium Gateway
# Cert issued per-service via cert-manager annotation on the Certificate
# ------------------------------------------------------------------------------
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: grafana-tls
  namespace: monitoring
spec:
  secretName: grafana-tls
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  dnsNames:
    - grafana.local.mk-labs.cloud
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: grafana
  namespace: monitoring
  annotations:
    external-dns.alpha.kubernetes.io/hostname: grafana.local.mk-labs.cloud
    external-dns.alpha.kubernetes.io/target: "10.1.71.90"
spec:
  parentRefs:
    - name: fastpass-gateway
      namespace: gateway
      sectionName: https
  hostnames:
    - grafana.local.mk-labs.cloud
  rules:
    - backendRefs:
        - name: monitoring-grafana
          port: 80