skills.rest
david-driscoll
david-driscollCOMMUNITY
Explore all skills by this author →
Website𝕏@david_dotnetGitHub

gateway-routing

Configure Kubernetes Gateway API HTTPRoute resources for internal or external Istio gateways.

1|Updated Apr 6, 2025
Search Tags:#homelab#httproute#gateway api#kubernetes tls#coraza waf#istio gateway#kubernetes routing
One-click install
npx skills add https://github.com/david-driscoll/stargate-command-cluster --skill gateway-routing-david-driscoll
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gateway-routing
Source: https://github.com/david-driscoll/stargate-command-cluster/tree/main/.agents/skills/gateway-routing
Command: npx skills add https://github.com/david-driscoll/stargate-command-cluster --skill gateway-routing-david-driscoll

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you expose homelab applications correctly using Kubernetes Gateway API, including choosing the right internal vs external gateway, wiring HTTPRoute parentRefs, and troubleshooting TLS and Coraza WAF behavior.

Core Features & Use Cases

  • Gateway selection by audience: Pick the internal gateway for LAN/intranet-only access and the external gateway for internet-facing traffic.
  • Correct HTTPRoute wiring: Create HTTPRoute resources that reference the gateway via parentRefs in the istio-gateway namespace and use the right hostname variables.
  • TLS and WAF troubleshooting: Explain how gateway-level wildcard certs work and how to handle external-only Coraza WAF false positives (including precise rule suppression).

Quick Start

Ask an AI to generate a minimal HTTPRoute for your service, including the correct gateway name, parentRefs.namespace: istio-gateway, and the appropriate ${internal_domain} or ${external_domain} hostname, based on whether the app must be LAN-only or internet-accessible.

Frequently Asked Questions about gateway-routing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Kubernetes Gateway API HTTPRoute resources to expose homelab services?▼

Configure Kubernetes Gateway API HTTPRoute resources by defining parentRefs with namespace: istio-gateway and setting the appropriate hostname variables based on whether the app requires internal or external access.

When should I use an internal versus external Istio gateway for Kubernetes routing?▼

Use the internal Istio gateway for LAN or intranet-only access, and select the external Istio gateway for internet-facing traffic to properly isolate and route homelab applications by audience.

How do I troubleshoot TLS failures with Kubernetes Gateway API wildcard certificates?▼

Troubleshoot TLS failures by verifying that your HTTPRoute correctly references gateway-level wildcard certificates and that parentRefs are properly wired to the correct gateway in the istio-gateway namespace.

How do I suppress Coraza WAF false positives for external gateway traffic?▼

Suppress Coraza WAF false positives for external traffic by applying SecRuleRemoveById directives within the coraza-wasm-plugin.yaml configuration file to precisely target and disable specific rules.

Do I need to specify a namespace in parentRefs when wiring HTTPRoute to an Istio gateway?▼

Yes, HTTPRoute parentRefs must include namespace: istio-gateway to correctly attach routing rules to the target gateway and ensure proper traffic flow for homelab applications.

Related Skills

Explore More Software Engineering Skills→
villadalminevilladalmine
1

gateway

Route cluster HTTP and HTTPS traffic through a shared Cilium Gateway.

Community
Advanced
ionfuryionfury
24

gateway-routing

Expose Kubernetes services via Gateway API with TLS and Coraza WAF.

Community
Advanced
ValyntValynt

zero-trust-service-mesh

Enforce mutual TLS and zero-trust policies across ValueOS agents in Kubernetes with Istio.

Official
Advanced
thc1006thc1006

gateway-api

Configure and deploy Kubernetes Gateway API with Envoy Gateway.

Community
Intermediate