skills.rest
ionfury
ionfuryCOMMUNITY
Explore all skills by this author →
GitHub

gateway-routing

Expose Kubernetes services via Gateway API with TLS and Coraza WAF.

24|3|Updated Mar 31, 2022
Search Tags:#kubernetes#waf#tls#gateway#gateway-api#coraza
One-click install
npx skills add https://github.com/ionfury/homelab --skill gateway-routing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gateway-routing
Source: https://github.com/ionfury/homelab/tree/main/.claude/skills/gateway-routing
Command: npx skills add https://github.com/ionfury/homelab --skill gateway-routing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Gateway routing, TLS certificates, and WAF configuration for Kubernetes platforms, enabling safe exposure of services via Gateway API with minimal operational overhead.

Core Features & Use Cases

  • Route services using Kubernetes Gateway API with internal and external gateways.
  • Manage TLS certificates via cert-manager using Let's Encrypt or internal CA.
  • Integrate Coraza WAF on the external gateway and tune rules for safe, high-availability traffic.
  • Provide guidance for debugging TLS, routing, and gateway issues across environments.

Quick Start

Create an HTTPRoute for a new service and verify end-to-end TLS through the external gateway.

Frequently Asked Questions about gateway-routing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I route Kubernetes services securely using Gateway API?▼

Secure Kubernetes Gateway API routing is configured by creating HTTPRoute resources attached to internal or external gateways, with TLS termination handled via cert-manager certificates for safe service exposure.

Can I use cert-manager with Let's Encrypt for Kubernetes Gateway API TLS?▼

Cert-manager supports Gateway API TLS by issuing certificates from Let's Encrypt for external gateways or an internal CA for internal gateways, ensuring automated end-to-end encryption.

How do I set up a dual-gateway configuration for homelab Kubernetes?▼

A dual-gateway homelab setup uses separate internal and external Gateway API listeners, allowing you to isolate private services while exposing public ones with TLS and WAF protection.

Does Coraza WAF work with Kubernetes Gateway API for external traffic?▼

Coraza WAF integrates with the external Gateway API gateway to inspect and filter internet-facing traffic, allowing you to tune Web Application Firewall rules for safe external service exposure.

Why is my Gateway API HTTPRoute not routing traffic correctly?▼

HTTPRoute traffic failures often stem from invalid gateway selection or missing TLS attachments; troubleshooting involves validating HTTPRoute parentRefs and Coraza WAF policy attachments across internal and external gateways.

What is the best way to debug TLS issues on a Kubernetes Gateway API gateway?▼

Debugging Gateway API TLS issues involves verifying cert-manager certificate readiness, checking gateway listener configurations, and ensuring HTTPRoutes correctly attach to TLS-enabled parent gateways.

Related Skills

Explore More Software Engineering Skills→
totallyGregtotallyGreg
2

kgateway

Configure Kubernetes Gateway API resources with kgateway for Envoy-based routing.

Community
Advanced
foxj77foxj77
18

cert-manager-troubleshooting

Diagnose cert-manager TLS certificate issues across Kubernetes resources.

Community
Advanced
haxlyshaxlys

mtls-configuration

Configure mutual TLS policies for Istio, Linkerd, SPIRE, and cert-manager deployments.

Community
Advanced
thc1006thc1006

ingress-migration

Migrate Ingress configurations to Gateway API with Envoy Gateway resources.

Community
Intermediate