add issuer

clusters/k3s-dgx/infrastructure/gateway.yaml

@@ -3,6 +3,8 @@ kind: Gateway
 metadata:
   name: envoy-gateway
   namespace: default
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
 spec:
   gatewayClassName: envoy
   listeners:
@@ -13,3 +15,15 @@ spec:
       allowedRoutes:
         namespaces:
           from: All
+
+    - name: https
+      protocol: HTTPS
+      port: 443
+      hostname: "mcp.corredorconect.com"
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: mcp-tls
+      allowedRoutes:
+        namespaces:
+          from: All

clusters/k3s-dgx/infrastructure/issuer.yaml

@@ -0,0 +1,16 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: haimkortovich88@gmail.com
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt
+    solvers:
+      - http01:
+          gatewayHTTPRoute:
+            parentRefs:
+              - name: envoy-gateway
+                namespace: default

clusters/k3s-dgx/infrastructure/kustomization.yaml

@@ -6,3 +6,4 @@ resources:
   - envoy-gateway-class.yaml
   - metal-lb.yaml
   - gateway.yaml
+  - issuer.yaml