Fix s3proxy route

charts/ace/templates/ingress/certificate.yaml

@@ -20,6 +20,9 @@ spec:
     - {{ include "ace.fullname" . }}-nats
     - {{ include "ace.fullname" . }}-nats.{{ .Release.Namespace }}.svc
     - {{ include "ace.fullname" . }}-nats.{{ .Release.Namespace }}.svc.cluster.local
+    - {{ include "ace.fullname" . }}-s3proxy
+    - {{ include "ace.fullname" . }}-s3proxy.{{ .Release.Namespace }}.svc
+    - {{ include "ace.fullname" . }}-s3proxy.{{ .Release.Namespace }}.svc.cluster.local
   {{- if eq .Values.global.platform.hostType "domain" }}
     - "{{ .Values.global.platform.host }}"
     {{- if and .Values.nats.enabled .Values.nats.nats.externalAccess }}

charts/s3proxy/templates/httproute.yaml

@@ -1,5 +1,7 @@
 {{- if (index .Values "gateway" "enabled") }}
 
+{{- if (index .Values "gateway" "hosts") }}
+
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
@@ -35,13 +37,31 @@ spec:
     - group: ""
       kind: Service
       name: {{ include "s3proxy.fullname" . }}
-      namespace: {{ .Release.Namespace }}
-      port: {{ .Values.service.port }}
+      namespace: {{ $.Release.Namespace }}
+      port: {{ $.Values.service.port }}
       weight: 1
     {{- end }}
   {{- end }}
 
 ---
+apiVersion: gateway.networking.k8s.io/v1
+kind: BackendTLSPolicy
+metadata:
+  name: {{ include "ace.fullname" . }}-s3proxy
+  namespace: {{ .Release.Namespace }}
+spec:
+  targetRefs:
+  - group: ""
+    kind: Service
+    name: {{ include "ace.fullname" . }}-s3proxy
+  validation:
+    caCertificateRefs:
+    - group: ""
+      kind: Secret
+      name: {{ include "ace.fullname" . }}-cert
+    hostname: {{ include "ace.fullname" . }}-s3proxy
+{{- end }}
+
 ---
 apiVersion: gateway.networking.k8s.io/v1alpha2
 kind: TCPRoute