From cbe753b2bb80eb8cda7ce859413cf4c1fc696a9f Mon Sep 17 00:00:00 2001
From: Khue Doan <mail@khuedoan.com>
Date: Mon, 12 Jan 2026 23:46:46 +0700
Subject: [PATCH] refactor(vault): migrate to Gateway API

---
 platform/staging/vault.yaml | 38 ++++++++++++++++++-------------------
 1 file changed, 18 insertions(+), 20 deletions(-)

diff --git a/platform/staging/vault.yaml b/platform/staging/vault.yaml
index f17715e..d84be93 100644
--- a/platform/staging/vault.yaml
+++ b/platform/staging/vault.yaml
@@ -111,26 +111,6 @@ spec:
                 path: secret
                 type: kv
             image: docker.io/hashicorp/vault:1.20.2
-            ingress:
-              annotations:
-                cert-manager.io/cluster-issuer: letsencrypt-prod
-              spec:
-                ingressClassName: nginx
-                rules:
-                - host: vault.cloudlab.khuedoan.com
-                  http:
-                    paths:
-                    - backend:
-                        service:
-                          name: vault-cluster
-                          port:
-                            number: 8200
-                      path: /
-                      pathType: Prefix
-                tls:
-                - hosts:
-                  - vault.cloudlab.khuedoan.com
-                  secretName: vault-tls-certificate
             serviceAccount: vault
             size: 1
             unsealConfig:
@@ -143,6 +123,24 @@ spec:
             - name: vault-data
               persistentVolumeClaim:
                 claimName: vault-data
+    route:
+      main:
+        kind: HTTPRoute
+        parentRefs:
+          - group: gateway.networking.k8s.io
+            kind: Gateway
+            name: gateway
+            namespace: istio-system
+        hostnames:
+          - vault.staging.khuedoan.com
+        rules:
+          - matches:
+              - path:
+                  type: PathPrefix
+                  value: /
+            backendRefs:
+              - name: vault-cluster
+                port: 8200
     rbac:
       bindings:
         cluster:
-- 
2.51.2