feat(cilium): Enable gateway

values/gitea/manifests/gateway-routes.yaml

@@ -0,0 +1,38 @@
+---
+# HTTP Route for Gitea web interface
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: gitea-http
+  namespace: gitea
+spec:
+  parentRefs:
+  - name: shared-gateway
+    namespace: kube-system
+  hostnames:
+  - {{ .Values.gitea.hostname }}
+  rules:
+  - matches:
+    - path:
+        type: PathPrefix
+        value: "/"
+    backendRefs:
+    - name: gitea-http
+      port: 3000
+
+---
+# TCP Route for Gitea SSH
+apiVersion: gateway.networking.k8s.io/v1alpha2
+kind: TCPRoute
+metadata:
+  name: gitea-ssh
+  namespace: gitea
+spec:
+  parentRefs:
+  - name: shared-gateway
+    namespace: kube-system
+    sectionName: ssh
+  rules:
+  - backendRefs:
+    - name: gitea-ssh
+      port: 22

values/gitea/manifests/gitea.yaml

@@ -30,6 +30,7 @@ spec:
     managedNamespaceMetadata:
       labels:
         component: sys
+        shared-gateway-access: "true"
     syncOptions:
       - CreateNamespace=true
       - ApplyOutOfSyncOnly=true