From c59628fbdf2fd199dcf14f6ab4c08743a84ed776 Mon Sep 17 00:00:00 2001
From: James Allenby <JamesAllenby@protonmail.com>
Date: Wed, 1 Jul 2026 20:15:45 +0100
Subject: [PATCH] feat: expose Longhorn and Hubble UIs with TLS

---
 manifests/gateway.yaml | 22 ++++++++++++++++++++++
 manifests/routes.yaml  | 33 +++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)
 create mode 100644 manifests/routes.yaml

diff --git a/manifests/gateway.yaml b/manifests/gateway.yaml
index 6bef86a..d9fccfa 100644
--- a/manifests/gateway.yaml
+++ b/manifests/gateway.yaml
@@ -36,3 +36,25 @@ spec:
       allowedRoutes:
         namespaces:
           from: All
+    - name: websecure-longhorn
+      hostname: longhorn.solidish.dev
+      port: 8443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: longhorn-solidish-dev-tls
+      allowedRoutes:
+        namespaces:
+          from: All
+    - name: websecure-hubble
+      hostname: hubble.solidish.dev
+      port: 8443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: hubble-solidish-dev-tls
+      allowedRoutes:
+        namespaces:
+          from: All
diff --git a/manifests/routes.yaml b/manifests/routes.yaml
new file mode 100644
index 0000000..fa842b1
--- /dev/null
+++ b/manifests/routes.yaml
@@ -0,0 +1,33 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: longhorn-ui
+  namespace: longhorn-system
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      sectionName: websecure-longhorn
+  hostnames:
+    - longhorn.solidish.dev
+  rules:
+    - backendRefs:
+        - name: longhorn-frontend
+          port: 80
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: hubble-ui
+  namespace: kube-system
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      sectionName: websecure-hubble
+  hostnames:
+    - hubble.solidish.dev
+  rules:
+    - backendRefs:
+        - name: hubble-ui
+          port: 80