feat: expose Longhorn and Hubble UIs with TLS

manifests/gateway.yaml

@@ -36,3 +36,25 @@ spec:
       allowedRoutes:
         namespaces:
           from: All
+    - name: websecure-longhorn
+      hostname: longhorn.solidish.dev
+      port: 8443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: longhorn-solidish-dev-tls
+      allowedRoutes:
+        namespaces:
+          from: All
+    - name: websecure-hubble
+      hostname: hubble.solidish.dev
+      port: 8443
+      protocol: HTTPS
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: hubble-solidish-dev-tls
+      allowedRoutes:
+        namespaces:
+          from: All

manifests/routes.yaml

@@ -0,0 +1,33 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: longhorn-ui
+  namespace: longhorn-system
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      sectionName: websecure-longhorn
+  hostnames:
+    - longhorn.solidish.dev
+  rules:
+    - backendRefs:
+        - name: longhorn-frontend
+          port: 80
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: hubble-ui
+  namespace: kube-system
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      sectionName: websecure-hubble
+  hostnames:
+    - hubble.solidish.dev
+  rules:
+    - backendRefs:
+        - name: hubble-ui
+          port: 80