# ------------------------------------------------------------------------------
# GatewayClass — tells Kubernetes that Cilium handles Gateway resources
# Defined here alongside the Gateway it enables
# ------------------------------------------------------------------------------
apiVersion: gateway.networking.k8s.io/v1
kind: GatewayClass
metadata:
  name: cilium
spec:
  controllerName: io.cilium/gateway-controller
  description: Cilium Gateway API implementation (eBPF-native)

---
# ------------------------------------------------------------------------------
# Gateway — fastpass-gateway
#
# This is the central Gateway that all HTTPRoute resources attach to.
# Cilium operator creates a LoadBalancer service for this Gateway automatically,
# which will receive an IP from the cilium-gateway-pool (10.1.71.90-.99).
#
# Usage: Applications create HTTPRoute resources that reference this Gateway:
#
#   spec:
#     parentRefs:
#       - name: fastpass-gateway
#         namespace: gateway-system
# ------------------------------------------------------------------------------
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: fastpass-gateway
  namespace: gateway-system
  annotations:
    io.cilium/lb-ipam-ips: "10.1.71.90"
spec:
  gatewayClassName: cilium
  listeners:
    - name: http
      protocol: HTTP
      port: 80
      allowedRoutes:
        namespaces:
          from: All
    - name: https
      protocol: HTTPS
      port: 443
      allowedRoutes:
        namespaces:
          from: All
      tls:
        mode: Terminate
        certificateRefs:
          - name: argocd-tls
            namespace: argocd