From ed004b381ba5b9450d797f8b267fa8514833a78e Mon Sep 17 00:00:00 2001
From: Linus Vogel <linus@linvogel.ch>
Date: Mon, 29 Jun 2026 20:14:26 +0200
Subject: [PATCH] does it work now?

---
 apps/istio.yaml                               |  5 ----
 helm/istiod/templates/apps-gateway.yaml       | 16 ----------
 .../{ingress-gateway.yaml => deployment.yaml} |  0
 helm/istiod/templates/gateway.yaml            | 30 +++++++++++++++++++
 4 files changed, 30 insertions(+), 21 deletions(-)
 delete mode 100644 helm/istiod/templates/apps-gateway.yaml
 rename helm/istiod/templates/{ingress-gateway.yaml => deployment.yaml} (100%)
 create mode 100644 helm/istiod/templates/gateway.yaml

diff --git a/apps/istio.yaml b/apps/istio.yaml
index 5c1d17b..fa5cf20 100644
--- a/apps/istio.yaml
+++ b/apps/istio.yaml
@@ -3,11 +3,6 @@ kind: Namespace
 metadata:
   name: istio-system
 ---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: istio-ingress
----
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
diff --git a/helm/istiod/templates/apps-gateway.yaml b/helm/istiod/templates/apps-gateway.yaml
deleted file mode 100644
index ce85199..0000000
--- a/helm/istiod/templates/apps-gateway.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: Gateway
-metadata:
-  name: apps-gateway
-  namespace: istio-ingress
-spec:
-  selector:
-    app: ingressgateway
-  servers:
-  - port:
-      number: 80
-      name: http
-      protocol: HTTP
-    hosts:
-    - "*.apps.linvogel.ch"
-    - "*.apps.linvogel.internal"
diff --git a/helm/istiod/templates/ingress-gateway.yaml b/helm/istiod/templates/deployment.yaml
similarity index 100%
rename from helm/istiod/templates/ingress-gateway.yaml
rename to helm/istiod/templates/deployment.yaml
diff --git a/helm/istiod/templates/gateway.yaml b/helm/istiod/templates/gateway.yaml
new file mode 100644
index 0000000..9f318c8
--- /dev/null
+++ b/helm/istiod/templates/gateway.yaml
@@ -0,0 +1,30 @@
+apiVersion: networking.istio.io/v1
+kind: Gateway
+metadata:
+  name: my-gateway
+  namespace: some-config-namespace
+spec:
+  selector:
+    app: my-gateway-controller
+  servers:
+  - port:
+      number: 80
+      name: http
+      protocol: HTTP
+    hosts:
+    - *.apps.linvogel.ch
+    - *.apps.linvogel.internal
+    tls:
+      httpsRedirect: true # sends 301 redirect for http requests
+  - port:
+      number: 443
+      name: https-443
+      protocol: HTTPS
+    hosts:
+    - *.apps.linvogel.ch
+    - *.apps.linvogel.internal
+    tls:
+      mode: SIMPLE 
+      serverCertificate: /etc/certs/servercert.pem
+      privateKey: /etc/certs/privatekey.pem
+