unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

feat(artifactapi): migrate Ingress to Gateway API #129

Merged
unkinben merged 3 commits from benvin/artifactapi-gateway-api into main 2026-05-23 16:06:34 +10:00
Conversation 0 Commits 3 Files Changed 4
+51 -33
unkinben commented 2026-05-22 00:08:58 +10:00
Owner
Copy Link
Copy Source

Summary

  • Replace Ingress (nginx) with Gateway + HTTPRoute using traefik-internal GatewayClass
  • TLS terminated at the Gateway listener; cert-manager provisions the certificate via vault-issuer
  • external-dns annotations moved to the Gateway

Notes

The original Ingress had nginx-specific annotations (proxy-body-size: 10g, proxy-read-timeout: 600) which are not portable to Gateway API. These can be re-introduced via a Traefik Middleware CRD if needed.

Test plan

  • ArgoCD syncs the app cleanly
  • cert-manager issues the artifactapi-tls certificate
  • external-dns creates the DNS record
  • https://artifactapi.k8s.syd1.au.unkin.net is reachable
## Summary - Replace `Ingress` (nginx) with `Gateway` + `HTTPRoute` using `traefik-internal` GatewayClass - TLS terminated at the Gateway listener; cert-manager provisions the certificate via `vault-issuer` - external-dns annotations moved to the Gateway ## Notes The original Ingress had nginx-specific annotations (`proxy-body-size: 10g`, `proxy-read-timeout: 600`) which are not portable to Gateway API. These can be re-introduced via a Traefik `Middleware` CRD if needed. ## Test plan - [ ] ArgoCD syncs the app cleanly - [ ] cert-manager issues the `artifactapi-tls` certificate - [ ] external-dns creates the DNS record - [ ] `https://artifactapi.k8s.syd1.au.unkin.net` is reachable
unkinben added 1 commit 2026-05-22 00:08:59 +10:00
feat(artifactapi): migrate Ingress to Gateway API
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
afcc4f36fe 
Replace nginx Ingress with Gateway + HTTPRoute using the traefik-internal
GatewayClass. TLS is terminated at the Gateway listener via cert-manager.
unkinben added 1 commit 2026-05-23 00:18:12 +10:00
fix(artifactapi): add traefik.io/instance label to Gateway
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
7275695f4e
unkinben added 1 commit 2026-05-23 00:20:34 +10:00
fix: correct external-dns target IP to 198.18.200.4
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
9830c36e0b
unkinben force-pushed benvin/artifactapi-gateway-api from 9830c36e0b to cc84d40253 2026-05-23 01:33:37 +10:00 Compare
unkinben merged commit c2637da068 into main 2026-05-23 16:06:34 +10:00
unkinben deleted branch benvin/artifactapi-gateway-api 2026-05-23 16:06:34 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#129
Delete Branch "benvin/artifactapi-gateway-api"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?