move routes to authentik-private-prod for proxy auth

apps/kustomize/web/base/gateway/routes/https-v4.yaml

@@ -1,15 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: web-https-v4
-spec:
-  rules:
-    - backendRefs:
-        - group: ""
-          kind: Service
-          name: web
-          port: 80
-      matches:
-        - path:
-            type: PathPrefix
-            value: /

apps/kustomize/web/base/gateway/routes/https.yaml

@@ -1,20 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: web-https
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: web-gw
-      sectionName: https
-  rules:
-    - backendRefs:
-        - group: ""
-          kind: Service
-          name: web
-          port: 80
-      matches:
-        - path:
-            type: PathPrefix
-            value: /

apps/kustomize/web/base/kustomization.yaml

@@ -4,8 +4,6 @@ kind: Kustomization
 resources:
   - gateway/routes/http.yaml
   - gateway/routes/http-v4.yaml
-  - gateway/routes/https.yaml
-  - gateway/routes/https-v4.yaml
   - gateway/gateway.yaml
   - gateway/issuer.yaml
   - gateway/referencegrant.yaml

apps/kustomize/web/envs/stage/gateway/gateway.yaml

@@ -19,7 +19,10 @@ spec:
       protocol: HTTPS
       allowedRoutes:
         namespaces:
-          from: Same
+          from: Selector
+          selector:
+            matchLabels:
+              kubernetes.io/metadata.name: authentik-private-prod
       tls:
         mode: Terminate
         certificateRefs:

apps/kustomize/web/envs/stage/gateway/routes/https-v4.yaml

@@ -1,13 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: web-https-v4
-spec:
-  hostnames:
-    - stage.d-b.ca
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: v4-gw
-      namespace: gateway-prod
-      sectionName: dbca-web-stage-https

apps/kustomize/web/envs/stage/gateway/routes/https.yaml

@@ -1,7 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: web-https
-spec:
-  hostnames:
-    - stage.d-b.ca

apps/kustomize/web/envs/stage/kustomization.yaml

@@ -7,8 +7,6 @@ resources:
 patches:
   - path: gateway/routes/http.yaml
   - path: gateway/routes/http-v4.yaml
-  - path: gateway/routes/https.yaml
-  - path: gateway/routes/https-v4.yaml
   - path: gateway/gateway.yaml
   - path: gateway/issuer.yaml
   - path: web/web-backend-tls.yaml