---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: vault-http-redirect
  namespace: vault
  labels:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
spec:
  hostnames:
    - vault.k8s.syd1.au.unkin.net
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: vault
      sectionName: http
  rules:
    - filters:
        - type: RequestRedirect
          requestRedirect:
            scheme: https
            statusCode: 301
      matches:
        - path:
            type: PathPrefix
            value: /
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: vault
  namespace: vault
  labels:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
spec:
  hostnames:
    - vault.k8s.syd1.au.unkin.net
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: vault
      sectionName: https
  rules:
    - backendRefs:
        - group: ""
          kind: Service
          name: vault
          port: 8200
          weight: 1
      matches:
        - path:
            type: PathPrefix
            value: /
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: vault-consul
  namespace: vault
  labels:
    app.kubernetes.io/name: vault
    app.kubernetes.io/instance: vault
spec:
  hostnames:
    - vault.service.consul
    - vault.query.consul
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: vault
      sectionName: vault-direct
  rules:
    - backendRefs:
        - group: ""
          kind: Service
          name: vault
          port: 8200
          weight: 1
      matches:
        - path:
            type: PathPrefix
            value: /