From 07c126540e27a53c128aca2bdfe3f1f54d1065c2 Mon Sep 17 00:00:00 2001
From: Baptiste Guillin <baptiste.guillin@gmail.com>
Date: Thu, 3 Sep 2026 21:20:22 +0200
Subject: [PATCH] Route Naviya through Cilium ingress network

---
 apps/naviya/80-gateway.yaml           | 60 +++------------------------
 apps/naviya/kustomization.yaml        |  1 -
 apps/naviya/patch-route-redirect.yaml |  7 ----
 3 files changed, 6 insertions(+), 62 deletions(-)
 delete mode 100644 apps/naviya/patch-route-redirect.yaml

diff --git a/apps/naviya/80-gateway.yaml b/apps/naviya/80-gateway.yaml
index fbfcfba..ff19886 100644
--- a/apps/naviya/80-gateway.yaml
+++ b/apps/naviya/80-gateway.yaml
@@ -1,23 +1,3 @@
-apiVersion: cilium.io/v2alpha1
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: application-metier-gateway
-spec:
-  serviceSelector:
-    matchExpressions:
-      - key: io.kubernetes.service.namespace
-        operator: In
-        values: ["application-metier"]
-      - key: io.kubernetes.service.name
-        operator: In
-        values: ["cilium-gateway-application-metier"]
-  nodeSelector:
-    matchExpressions:
-      - key: node-role.kubernetes.io/control-plane
-        operator: DoesNotExist
-  loadBalancerIPs: true
-  externalIPs: false
----
 apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
 metadata:
@@ -25,10 +5,12 @@ metadata:
   namespace: application-metier
 spec:
   gatewayClassName: cilium
+  addresses:
+    - type: IPAddress
+      value: 172.16.40.100
   infrastructure:
-    annotations:
-      metallb.io/address-pool: bgp-pool
-      metallb.io/loadBalancerIPs: "172.16.10.201"
+    labels:
+      naviya.io/ingress-lb: "true"
   listeners:
     - name: http
       protocol: HTTP
@@ -37,36 +19,6 @@ spec:
       allowedRoutes:
         namespaces:
           from: Same
-    - name: https
-      protocol: HTTPS
-      port: 443
-      hostname: naviya.guillin.ovh
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - kind: Secret
-            name: application-metier-tls
-      allowedRoutes:
-        namespaces:
-          from: Same
----
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: application-metier-http-redirect
-  namespace: application-metier
-spec:
-  parentRefs:
-    - name: application-metier
-      sectionName: http
-  hostnames:
-    - naviya.guillin.ovh
-  rules:
-    - filters:
-        - type: RequestRedirect
-          requestRedirect:
-            scheme: https
-            statusCode: 301
 ---
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
@@ -76,7 +28,7 @@ metadata:
 spec:
   parentRefs:
     - name: application-metier
-      sectionName: https
+      sectionName: http
   hostnames:
     - naviya.guillin.ovh
   rules:
diff --git a/apps/naviya/kustomization.yaml b/apps/naviya/kustomization.yaml
index 820c317..0c5be50 100644
--- a/apps/naviya/kustomization.yaml
+++ b/apps/naviya/kustomization.yaml
@@ -19,4 +19,3 @@ patches:
 - path: patch-frontend.yaml
 - path: patch-gateway.yaml
 - path: patch-route.yaml
-- path: patch-route-redirect.yaml
diff --git a/apps/naviya/patch-route-redirect.yaml b/apps/naviya/patch-route-redirect.yaml
deleted file mode 100644
index 2e55d2b..0000000
--- a/apps/naviya/patch-route-redirect.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: application-metier-http-redirect
-  namespace: application-metier
-  annotations:
-    argocd.argoproj.io/sync-wave: "3"