From d3c493c65dc27cf215f25af058a69d2db9467aee Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 4 Jul 2026 11:46:37 -0400
Subject: [PATCH] feat: Gateway API support, in lieu of Ingress

---
 templates/_helpers.tpl         |  9 ++++
 templates/gitea/httproute.yaml | 79 ++++++++++++++++++++++++++++++++++
 templates/gitea/ingress.yaml   |  1 +
 values.yaml                    | 21 +++++++++
 4 files changed, 110 insertions(+)
 create mode 100644 templates/gitea/httproute.yaml

diff --git a/templates/_helpers.tpl b/templates/_helpers.tpl
index f993b95..5514c8b 100644
--- a/templates/_helpers.tpl
+++ b/templates/_helpers.tpl
@@ -471,3 +471,12 @@ https
 {{- define "gitea.metrics-secret-name" -}}
 {{ default (printf "%s-metrics-secret" (include "gitea.fullname" .)) }}
 {{- end -}}
+
+{{/*
+Validate that Ingress and Gateway HTTPRoute are not enabled at the same time
+*/}}
+{{- define "gitea.validate-ingress-gateway-conflict" -}}
+{{- if and ((.Values.ingress).enabled) (((.Values.gateway).httpRoute).enabled) -}}
+{{- fail "You cannot enable both Ingress and HTTPRoute at the same time" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/templates/gitea/httproute.yaml b/templates/gitea/httproute.yaml
new file mode 100644
index 0000000..993e83c
--- /dev/null
+++ b/templates/gitea/httproute.yaml
@@ -0,0 +1,79 @@
+{{- include "gitea.validate-ingress-gateway-conflict" . }}
+{{- if .Values.gateway.httpRoute.enabled -}}
+{{- $fullName := include "gitea.fullname" . -}}
+{{- $httpPort := .Values.service.http.port -}}
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: {{ $fullName }}
+  namespace: {{ .Values.namespace | default .Release.Namespace }}
+  labels:
+    {{- include "gitea.labels" . | nindent 4 }}
+  annotations:
+    {{- range $key, $value := .Values.gateway.httpRoute.annotations }}
+      {{ $key }}: {{ $value | quote }}
+    {{- end }}
+spec:
+  hostnames:
+    {{- range .Values.gateway.httpRoute.hostnames }}
+    - {{ tpl . $ | quote }}
+    {{- end }}
+  parentRefs:
+    {{- range .Values.gateway.httpRoute.parentRefs }}
+    - name: {{ .name | quote }}
+      {{- if .namespace }}
+      namespace: {{ .namespace | quote }}
+      {{- end }}
+      {{- if .kind }}
+      kind: {{ .kind | quote }}
+      {{- end }}
+      {{- if .group }}
+      group: {{ .group | quote }}
+      {{- end }}
+      {{- if .sectionName }}
+      sectionName: {{ .sectionName | quote }}
+      {{- end }}
+      {{- if .port }}
+      port: {{ .port }}
+      {{- end }}
+    {{- end }}
+  rules:
+    {{- if .Values.gateway.httpRoute.paths }}
+    {{- range .Values.gateway.httpRoute.paths }}
+    {{- if kindIs "string" . }}
+    - matches:
+        - path:
+            type: {{ default "PathPrefix" $.Values.gateway.httpRoute.pathType }}
+            value: {{ . }}
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ $.Values.namespace | default $.Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- else }}
+    - matches:
+        - path:
+            type: {{ .pathType | default "PathPrefix" }}
+            value: {{ .path | default "/" }}
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ $.Values.namespace | default $.Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- end }}
+    {{- end }}
+    {{- else }}
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/"
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ .Values.namespace | default .Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- end }}
+{{- end }}
\ No newline at end of file
diff --git a/templates/gitea/ingress.yaml b/templates/gitea/ingress.yaml
index 9312ffb..0056b1e 100644
--- a/templates/gitea/ingress.yaml
+++ b/templates/gitea/ingress.yaml
@@ -1,3 +1,4 @@
+{{- include "gitea.validate-ingress-gateway-conflict" . }}
 {{- if .Values.ingress.enabled -}}
 {{- $fullName := include "gitea.fullname" . -}}
 {{- $httpPort := .Values.service.http.port -}}
diff --git a/values.yaml b/values.yaml
index 107e623..ff203c2 100644
--- a/values.yaml
+++ b/values.yaml
@@ -177,6 +177,27 @@ ingress:
   #    hosts:
   #      - git.example.com
 
+## @section Gateway
+## @param gateway.httpRoute.annotations HTTPRoute annotations
+## @param gateway.httpRoute.hostnames HTTPRoute hostnames
+## @param gateway.httpRoute.parentRefs HTTPRoute parentRefs
+## @param gateway.httpRoute.pathType HTTPRoute path match type (PathPrefix, Exact, RegularExpression)
+## @param gateway.httpRoute.paths[0].path Default HTTPRoute path
+gateway:
+  httpRoute:
+    enabled: false
+    annotations: {}
+    hostnames:
+      - git.example.com
+    parentRefs:
+      - name: traefik
+        sectionName: https
+        kind: Gateway
+    pathType: PathPrefix
+    paths:
+      - path: /
+
+
 ## @section deployment
 #
 ## @param resources Kubernetes resources