From baca4c94f1bb1537fdd40a654facccd6c8c985d9 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 23 May 2026 22:13:50 +1000
Subject: [PATCH] =?UTF-8?q?feat(vault):=20add=20HTTP=E2=86=92HTTPS=20redir?=
 =?UTF-8?q?ect=20on=20port=2080?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/base/vault/gateway.yaml   |  7 +++++++
 apps/base/vault/httproute.yaml | 25 +++++++++++++++++++++++++
 2 files changed, 32 insertions(+)

diff --git a/apps/base/vault/gateway.yaml b/apps/base/vault/gateway.yaml
index 8490020..7227dc7 100644
--- a/apps/base/vault/gateway.yaml
+++ b/apps/base/vault/gateway.yaml
@@ -18,6 +18,13 @@ metadata:
 spec:
   gatewayClassName: traefik-internal
   listeners:
+    - name: http
+      port: 80
+      protocol: HTTP
+      hostname: vault.k8s.syd1.au.unkin.net
+      allowedRoutes:
+        namespaces:
+          from: Same
     - name: https
       port: 443
       protocol: HTTPS
diff --git a/apps/base/vault/httproute.yaml b/apps/base/vault/httproute.yaml
index 9668808..61fd1c4 100644
--- a/apps/base/vault/httproute.yaml
+++ b/apps/base/vault/httproute.yaml
@@ -1,6 +1,31 @@
 ---
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
+metadata:
+  name: vault-http-redirect
+  namespace: vault
+  labels:
+    app.kubernetes.io/name: vault
+    app.kubernetes.io/instance: vault
+spec:
+  hostnames:
+    - vault.k8s.syd1.au.unkin.net
+  parentRefs:
+    - name: vault
+      sectionName: http
+  rules:
+    - filters:
+        - type: RequestRedirect
+          requestRedirect:
+            scheme: https
+            statusCode: 301
+      matches:
+        - path:
+            type: PathPrefix
+            value: /
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
 metadata:
   name: vault
   namespace: vault