add unit tests for gateway api

add new values to README
feat: Gateway API support, in lieu of Ingress
2026-07-04 12:20:55 -04:00 · 2026-07-04 12:14:44 -04:00 · 2026-07-04 11:46:37 -04:00 · 2026-07-04 00:08:54 +00:00 · 2026-07-04 00:08:44 +00:00 · 2026-07-02 17:01:16 +00:00
23 changed files with 425 additions and 107 deletions
@@ -8,12 +8,12 @@ on:
 jobs:
  changelog:
    runs-on: ubuntu-latest
-    container: docker.io/thegeeklab/git-sv:2.0.9
+    container: docker.io/thegeeklab/git-sv:2.1.3
    steps:
      - name: install tools
        run: |
          apk add -q --update --no-cache nodejs curl jq sed
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Generate upcoming changelog
@@ -11,9 +11,9 @@ on:
 jobs:
  check-and-test:
    runs-on: ubuntu-latest
-    container: commitlint/commitlint:20.4.2
+    container: commitlint/commitlint:21.2.0
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
      - name: check PR title
        run: |
          echo "${{ gitea.event.pull_request.title }}" | commitlint --config .commitlintrc.json
@@ -9,7 +9,7 @@ jobs:
  generate-chart-publish:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0

@@ -21,7 +21,7 @@ jobs:
      - name: Install helm
        env:
          # renovate: datasource=docker depName=alpine/helm
-          HELM_VERSION: "4.1.1"
+          HELM_VERSION: "4.2.2"
        run: |
          curl --fail --location --output /dev/stdout --silent --show-error https://get.helm.sh/helm-v${HELM_VERSION}-linux-$(dpkg --print-architecture).tar.gz | tar --extract --gzip --file /dev/stdin
          mv linux-$(dpkg --print-architecture)/helm /usr/local/bin/
@@ -48,7 +48,7 @@ jobs:

      - name: Import GPG key
        id: import_gpg
-        uses: https://github.com/crazy-max/ghaction-import-gpg@v6
+        uses: https://github.com/crazy-max/ghaction-import-gpg@v7
        with:
          gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
          passphrase: ${{ secrets.GPGSIGN_PASSPHRASE }}
@@ -91,12 +91,12 @@ jobs:
  release-gitea:
    needs: generate-chart-publish
    runs-on: ubuntu-latest
-    container: docker.io/thegeeklab/git-sv:2.0.9
+    container: docker.io/thegeeklab/git-sv:2.1.3
    steps:
      - name: install tools
        run: |
          apk add -q --update --no-cache nodejs
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
        with:
          fetch-tags: true
          fetch-depth: 0
@@ -10,18 +10,21 @@ on:

 env:
  # renovate: datasource=github-releases depName=helm-unittest/helm-unittest
-  HELM_UNITTEST_VERSION: "v1.0.3"
+  HELM_UNITTEST_VERSION: "v1.1.1"

 jobs:
  check-and-test:
    runs-on: ubuntu-latest
-    container: alpine/helm:4.1.1
+    container: alpine/helm:4.2.2
    steps:
      - name: install tools
-        run: |
+        run: | # Hacky way of installing yamllint due to previous action failures, likely not needed after dependency fix is made on Alpine's side
          apk update
-          apk add --update bash make nodejs npm yamllint ncurses
-      - uses: actions/checkout@v6
+          apk add --update bash make nodejs npm ncurses python3 py3-pip
+          python3 -m venv /opt/venv
+          /opt/venv/bin/pip install yamllint
+          ln -s /opt/venv/bin/yamllint /usr/local/bin/yamllint
+      - uses: actions/checkout@v7
      - name: install chart dependencies
        run: helm dependency build
      - name: lint
@@ -1,6 +1,6 @@
 {
    "yaml.schemas": {
-        "https://raw.githubusercontent.com/helm-unittest/helm-unittest/v1.0.3/schema/helm-testsuite.json": [
+        "https://raw.githubusercontent.com/helm-unittest/helm-unittest/v1.1.1/schema/helm-testsuite.json": [
            "/unittests/**/*.yaml"
        ]
    },
@@ -1,7 +1,7 @@
 dependencies:
 - name: postgresql
  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 18.4.0
+  version: 18.7.11
 - name: postgresql-ha
  repository: oci://registry-1.docker.io/bitnamicharts
  version: 16.3.2
@@ -10,6 +10,6 @@ dependencies:
  version: 3.0.24
 - name: valkey
  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 5.4.0
-digest: sha256:1f62ef8aecb4c8090bbc9db54ef2cd14f1024030541810d8103e90b98fc8d32f
-generated: "2026-02-21T04:01:32.726773465Z"
+  version: 6.1.14
+digest: sha256:7eeedc92664d1fccceafeadd55d10090e67bc11e1961cbd8f62a92f51c84586a
+generated: "2026-07-04T00:01:06.153107369Z"
@@ -4,7 +4,7 @@ description: (Unofficial) Gitea Helm chart for Kubernetes
 type: application
 version: 0.0.0
 # renovate datasource=github-releases depName=go-gitea/gitea extractVersion=^v(?<version>.*)$
-appVersion: 1.25.4
+appVersion: 1.26.4
 icon: https://gitea.com/assets/img/logo.svg

 annotations:
@@ -32,7 +32,7 @@ dependencies:
  # https://github.com/bitnami/charts/blob/main/bitnami/postgresql
  - name: postgresql
    repository: oci://registry-1.docker.io/bitnamicharts
-    version: 18.4.0
+    version: 18.7.11
    condition: postgresql.enabled
  # https://github.com/bitnami/charts/blob/main/bitnami/postgresql-ha/Chart.yaml
  - name: postgresql-ha
@@ -47,5 +47,5 @@ dependencies:
  # https://github.com/bitnami/charts/blob/main/bitnami/valkey/Chart.yaml
  - name: valkey
    repository: oci://registry-1.docker.io/bitnamicharts
-    version: 5.4.0
+    version: 6.1.14
    condition: valkey.enabled
@@ -948,7 +948,7 @@ To comply with the Gitea helm chart definition of the digest parameter, a "custo
 | `global.imagePullSecrets` | global image pull secrets override; can be extended by `imagePullSecrets`                      | `[]`  |
 | `global.storageClass`     | global storage class override                                                                  | `""`  |
 | `global.hostAliases`      | global hostAliases which will be added to the pod's hosts files                                | `[]`  |
-| `namespace`               | An explicit namespace to deploy Gitea into. Defaults to the release namespace if not specified | `""`  |
+| `namespace`               | An explicit namespace to deploy gitea into. Defaults to the release namespace if not specified | `""`  |
 | `replicaCount`            | number of replicas for the deployment                                                          | `1`   |

 ### strategy
@@ -1026,6 +1026,19 @@ To comply with the Gitea helm chart definition of the digest parameter, a "custo
 | `ingress.hosts[0].paths[0].path` | Default Ingress path            | `/`               |
 | `ingress.tls`                    | Ingress tls settings            | `[]`              |

+### Gateway
+
+| Name                                          | Description                                                      | Value                 |
+| --------------------------------------------- | ---------------------------------------------------------------- | --------------------- |
+| `gateway.httpRoute.enabled`                   | Enable HTTPRoute                                                 | `false`               |
+| `gateway.httpRoute.annotations`               | HTTPRoute annotations                                            | `{}`                  |
+| `gateway.httpRoute.hostnames`                 | HTTPRoute hostnames                                              | `["git.example.com"]` |
+| `gateway.httpRoute.parentRefs[0].name`        | HTTPRoute Gateway name                                           | `traefik`             |
+| `gateway.httpRoute.parentRefs[0].sectionName` | HTTPRoute Gateway section name                                   | `https`               |
+| `gateway.httpRoute.parentRefs[0].kind`        | HTTPRoute Gateway kind                                           | `Gateway`             |
+| `gateway.httpRoute.pathType`                  | HTTPRoute path match type (PathPrefix, Exact, RegularExpression) | `PathPrefix`          |
+| `gateway.httpRoute.paths[0].path`             | Default HTTPRoute path                                           | `/`                   |
+
 ### deployment

 | Name                                       | Description                                            | Value |
@@ -1070,8 +1083,8 @@ To comply with the Gitea helm chart definition of the digest parameter, a "custo
 | `persistence.subPath`                             | Subdirectory of the volume to mount at                                                                | `nil`                  |
 | `persistence.volumeName`                          | Name of persistent volume in PVC                                                                      | `""`                   |
 | `extraContainers`                                 | Additional sidecar containers to run in the pod                                                       | `[]`                   |
-| `preExtraInitContainers`                          | Additional init containers to run in the pod before Gitea runs it owns init containers.               | `[]`                   |
-| `postExtraInitContainers`                         | Additional init containers to run in the pod after Gitea runs it owns init containers.                | `[]`                   |
+| `preExtraInitContainers`                          | Additional init containers to run in the pod before gitea runs it owns init containers.               | `[]`                   |
+| `postExtraInitContainers`                         | Additional init containers to run in the pod after gitea runs it owns init containers.                | `[]`                   |
 | `extraVolumes`                                    | Additional volumes to mount to the Gitea deployment                                                   | `[]`                   |
 | `extraContainerVolumeMounts`                      | Mounts that are only mapped into the Gitea runtime/main container, to e.g. override custom templates. | `[]`                   |
 | `extraInitVolumeMounts`                           | Mounts that are only mapped into the init-containers. Can be used for additional preconfiguration.    | `[]`                   |
@@ -8,7 +8,7 @@
      "license": "MIT",
      "devDependencies": {
        "@bitnami/readme-generator-for-helm": "^2.5.0",
-        "markdownlint-cli": "^0.47.0"
+        "markdownlint-cli": "^0.49.0"
      },
      "engines": {
        "node": ">=16.0.0",
@@ -33,9 +33,9 @@
      }
    },
    "node_modules/@types/debug": {
-      "version": "4.1.12",
-      "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.12.tgz",
-      "integrity": "sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==",
+      "version": "4.1.13",
+      "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.13.tgz",
+      "integrity": "sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -91,9 +91,9 @@
      "license": "MIT"
    },
    "node_modules/brace-expansion": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
-      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
+      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -280,9 +280,9 @@
      "license": "ISC"
    },
    "node_modules/get-east-asian-width": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/get-east-asian-width/-/get-east-asian-width-1.5.0.tgz",
-      "integrity": "sha512-CQ+bEO+Tva/qlmw24dCejulK5pMzVnUOFOijVogd3KQs07HnRIgp8TGipvCCRT06xeYEbpbgwaCxglFyiuIcmA==",
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/get-east-asian-width/-/get-east-asian-width-1.6.0.tgz",
+      "integrity": "sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -402,10 +402,20 @@
      }
    },
    "node_modules/js-yaml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
+      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
      "license": "MIT",
      "dependencies": {
        "argparse": "^2.0.1"
@@ -432,9 +442,9 @@
      }
    },
    "node_modules/katex": {
-      "version": "0.16.33",
-      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.33.tgz",
-      "integrity": "sha512-q3N5u+1sY9Bu7T4nlXoiRBXWfwSefNGoKeOwekV+gw0cAXQlz2Ww6BLcmBxVDeXBMUDQv6fK5bcNaJLxob3ZQA==",
+      "version": "0.16.47",
+      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz",
+      "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==",
      "dev": true,
      "funding": [
        "https://opencollective.com/katex",
@@ -459,32 +469,52 @@
      }
    },
    "node_modules/linkify-it": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.0.tgz",
-      "integrity": "sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ==",
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.2.tgz",
+      "integrity": "sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==",
      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/markdown-it"
+        }
+      ],
      "license": "MIT",
      "dependencies": {
        "uc.micro": "^2.0.0"
      }
    },
    "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
      "dev": true,
      "license": "MIT"
    },
    "node_modules/markdown-it": {
-      "version": "14.1.1",
-      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.1.1.tgz",
-      "integrity": "sha512-BuU2qnTti9YKgK5N+IeMubp14ZUKUUw7yeJbkjtosvHiP0AZ5c8IAgEMk79D0eC8F23r4Ac/q8cAIFdm2FtyoA==",
+      "version": "14.2.0",
+      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.2.0.tgz",
+      "integrity": "sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ==",
      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/markdown-it"
+        }
+      ],
      "license": "MIT",
      "dependencies": {
        "argparse": "^2.0.1",
        "entities": "^4.4.0",
-        "linkify-it": "^5.0.0",
+        "linkify-it": "^5.0.1",
        "mdurl": "^2.0.0",
        "punycode.js": "^2.3.1",
        "uc.micro": "^2.1.0"
@@ -508,9 +538,9 @@
      }
    },
    "node_modules/markdownlint": {
-      "version": "0.40.0",
-      "resolved": "https://registry.npmjs.org/markdownlint/-/markdownlint-0.40.0.tgz",
-      "integrity": "sha512-UKybllYNheWac61Ia7T6fzuQNDZimFIpCg2w6hHjgV1Qu0w1TV0LlSgryUGzM0bkKQCBhy2FDhEELB73Kb0kAg==",
+      "version": "0.41.0",
+      "resolved": "https://registry.npmjs.org/markdownlint/-/markdownlint-0.41.0.tgz",
+      "integrity": "sha512-xMUI3ChBuRuxuLF4ENvCZyS8z/+Jly1coUcZwErKLIB3sDj7ojpaTBa1e9YVPhSN4jGEIjYGQCldbTJS/hqS+A==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -522,40 +552,40 @@
        "micromark-extension-gfm-table": "2.1.1",
        "micromark-extension-math": "3.1.0",
        "micromark-util-types": "2.0.2",
-        "string-width": "8.1.0"
+        "string-width": "8.2.1"
      },
      "engines": {
-        "node": ">=20"
+        "node": ">=22"
      },
      "funding": {
        "url": "https://github.com/sponsors/DavidAnson"
      }
    },
    "node_modules/markdownlint-cli": {
-      "version": "0.47.0",
-      "resolved": "https://registry.npmjs.org/markdownlint-cli/-/markdownlint-cli-0.47.0.tgz",
-      "integrity": "sha512-HOcxeKFAdDoldvoYDofd85vI8LgNWy8vmYpCwnlLV46PJcodmGzD7COSSBlhHwsfT4o9KrAStGodImVBus31Bg==",
+      "version": "0.49.0",
+      "resolved": "https://registry.npmjs.org/markdownlint-cli/-/markdownlint-cli-0.49.0.tgz",
+      "integrity": "sha512-vS5tWq5W91Gg33LD4pyAaXPclnz/sRvo6/RGOyDQjQ3eds2DkK6H4szUuE0M9TiRB/u/VBx1gtd9Ktrtx5WlSA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "commander": "~14.0.2",
+        "commander": "~15.0.0",
        "deep-extend": "~0.6.0",
        "ignore": "~7.0.5",
-        "js-yaml": "~4.1.1",
+        "js-yaml": "~4.2.0",
        "jsonc-parser": "~3.3.1",
        "jsonpointer": "~5.0.1",
-        "markdown-it": "~14.1.0",
-        "markdownlint": "~0.40.0",
-        "minimatch": "~10.1.1",
+        "markdown-it": "~14.2.0",
+        "markdownlint": "~0.41.0",
+        "minimatch": "~10.2.5",
        "run-con": "~1.3.2",
-        "smol-toml": "~1.5.2",
-        "tinyglobby": "~0.2.15"
+        "smol-toml": "~1.6.1",
+        "tinyglobby": "~0.2.17"
      },
      "bin": {
        "markdownlint": "markdownlint.js"
      },
      "engines": {
-        "node": ">=20"
+        "node": ">=22"
      }
    },
    "node_modules/markdownlint-cli/node_modules/balanced-match": {
@@ -569,9 +599,9 @@
      }
    },
    "node_modules/markdownlint-cli/node_modules/brace-expansion": {
-      "version": "5.0.3",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.3.tgz",
-      "integrity": "sha512-fy6KJm2RawA5RcHkLa1z/ScpBeA762UF9KmZQxwIbDtRJrgLzM10depAiEQ+CXYcoiqW1/m96OAAoke2nE9EeA==",
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
+      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -582,26 +612,26 @@
      }
    },
    "node_modules/markdownlint-cli/node_modules/commander": {
-      "version": "14.0.3",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz",
-      "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==",
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz",
+      "integrity": "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==",
      "dev": true,
      "license": "MIT",
      "engines": {
-        "node": ">=20"
+        "node": ">=22.12.0"
      }
    },
    "node_modules/markdownlint-cli/node_modules/minimatch": {
-      "version": "10.1.3",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.3.tgz",
-      "integrity": "sha512-IF6URNyBX7Z6XfvjpaNy5meRxPZiIf2OqtOoSLs+hLJ9pJAScnM1RjrFcbCaD85y42KcI+oZmKjFIJKYDFjQfg==",
+      "version": "10.2.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
+      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
      "dev": true,
      "license": "BlueOak-1.0.0",
      "dependencies": {
-        "brace-expansion": "^5.0.2"
+        "brace-expansion": "^5.0.5"
      },
      "engines": {
-        "node": "20 || >=22"
+        "node": "18 || 20 || >=22"
      },
      "funding": {
        "url": "https://github.com/sponsors/isaacs"
@@ -1221,9 +1251,9 @@
      }
    },
    "node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -1270,9 +1300,9 @@
      }
    },
    "node_modules/smol-toml": {
-      "version": "1.5.2",
-      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.5.2.tgz",
-      "integrity": "sha512-QlaZEqcAH3/RtNyet1IPIYPsEWAaYyXXv1Krsi+1L/QHppjX4Ifm8MQsBISz9vE8cHicIq3clogsheili5vhaQ==",
+      "version": "1.6.1",
+      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.6.1.tgz",
+      "integrity": "sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==",
      "dev": true,
      "license": "BSD-3-Clause",
      "engines": {
@@ -1283,14 +1313,14 @@
      }
    },
    "node_modules/string-width": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.1.0.tgz",
-      "integrity": "sha512-Kxl3KJGb/gxkaUMOjRsQ8IrXiGW75O4E3RPjFIINOVH8AMl2SQ/yWdTzWwF3FevIX9LcMAjJW+GRwAlAbTSXdg==",
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.2.1.tgz",
+      "integrity": "sha512-IIaP0g3iy9Cyy18w3M9YcaDudujEAVHKt3a3QJg1+sr/oX96TbaGUubG0hJyCjCBThFH+tFpcIyoUHUn1ogaLA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "get-east-asian-width": "^1.3.0",
-        "strip-ansi": "^7.1.0"
+        "get-east-asian-width": "^1.5.0",
+        "strip-ansi": "^7.1.2"
      },
      "engines": {
        "node": ">=20"
@@ -1300,13 +1330,13 @@
      }
    },
    "node_modules/strip-ansi": {
-      "version": "7.1.2",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.2.tgz",
-      "integrity": "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==",
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
+      "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "ansi-regex": "^6.0.1"
+        "ansi-regex": "^6.2.2"
      },
      "engines": {
        "node": ">=12"
@@ -1329,14 +1359,14 @@
      }
    },
    "node_modules/tinyglobby": {
-      "version": "0.2.15",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
-      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "fdir": "^6.5.0",
-        "picomatch": "^4.0.3"
+        "picomatch": "^4.0.4"
      },
      "engines": {
        "node": ">=12.0.0"
@@ -1360,9 +1390,9 @@
      "license": "ISC"
    },
    "node_modules/yaml": {
-      "version": "2.8.2",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
-      "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
+      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
      "dev": true,
      "license": "ISC",
      "bin": {
@@ -14,6 +14,6 @@
  },
  "devDependencies": {
    "@bitnami/readme-generator-for-helm": "^2.5.0",
-    "markdownlint-cli": "^0.47.0"
+    "markdownlint-cli": "^0.49.0"
  }
 }
@@ -1,7 +1,6 @@
 {
  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
  extends: [
-    'gitea>gitea/renovate-config',
    ':automergeMinor',
    'schedule:automergeDaily',
    'schedule:weekends',
@@ -151,4 +151,4 @@ if [ -f ${GITEA_APP_INI} ]; then
  unset GITEA__SERVER__LFS_JWT_SECRET
 fi

-environment-to-ini -o $GITEA_APP_INI
+environment-to-ini --config $GITEA_APP_INI --in-place
@@ -471,3 +471,12 @@ https
 {{- define "gitea.metrics-secret-name" -}}
 {{ default (printf "%s-metrics-secret" (include "gitea.fullname" .)) }}
 {{- end -}}
+
+{{/*
+Validate that Ingress and Gateway HTTPRoute are not enabled at the same time
+*/}}
+{{- define "gitea.validate-ingress-gateway-conflict" -}}
+{{- if and ((.Values.ingress).enabled) (((.Values.gateway).httpRoute).enabled) -}}
+{{- fail "You cannot enable both Ingress and HTTPRoute at the same time" -}}
+{{- end -}}
+{{- end -}}
@@ -0,0 +1,79 @@
+{{- include "gitea.validate-ingress-gateway-conflict" . }}
+{{- if .Values.gateway.httpRoute.enabled -}}
+{{- $fullName := include "gitea.fullname" . -}}
+{{- $httpPort := .Values.service.http.port -}}
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: {{ $fullName }}
+  namespace: {{ .Values.namespace | default .Release.Namespace }}
+  labels:
+    {{- include "gitea.labels" . | nindent 4 }}
+  annotations:
+    {{- range $key, $value := .Values.gateway.httpRoute.annotations }}
+      {{ $key }}: {{ $value | quote }}
+    {{- end }}
+spec:
+  hostnames:
+    {{- range .Values.gateway.httpRoute.hostnames }}
+    - {{ tpl . $ | quote }}
+    {{- end }}
+  parentRefs:
+    {{- range .Values.gateway.httpRoute.parentRefs }}
+    - name: {{ .name | quote }}
+      {{- if .namespace }}
+      namespace: {{ .namespace | quote }}
+      {{- end }}
+      {{- if .kind }}
+      kind: {{ .kind | quote }}
+      {{- end }}
+      {{- if .group }}
+      group: {{ .group | quote }}
+      {{- end }}
+      {{- if .sectionName }}
+      sectionName: {{ .sectionName | quote }}
+      {{- end }}
+      {{- if .port }}
+      port: {{ .port }}
+      {{- end }}
+    {{- end }}
+  rules:
+    {{- if .Values.gateway.httpRoute.paths }}
+    {{- range .Values.gateway.httpRoute.paths }}
+    {{- if kindIs "string" . }}
+    - matches:
+        - path:
+            type: {{ default "PathPrefix" $.Values.gateway.httpRoute.pathType }}
+            value: {{ . }}
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ $.Values.namespace | default $.Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- else }}
+    - matches:
+        - path:
+            type: {{ .pathType | default "PathPrefix" }}
+            value: {{ .path | default "/" }}
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ $.Values.namespace | default $.Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- end }}
+    {{- end }}
+    {{- else }}
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/"
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ .Values.namespace | default .Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- end }}
+{{- end }}
@@ -1,3 +1,4 @@
+{{- include "gitea.validate-ingress-gateway-conflict" . }}
 {{- if .Values.ingress.enabled -}}
 {{- $fullName := include "gitea.fullname" . -}}
 {{- $httpPort := .Values.service.http.port -}}
@@ -29,7 +29,7 @@ function teardown() {
 function expect_environment_to_ini_call() {
  export ENV_TO_INI_EXPECTED=1
  stub environment-to-ini \
-    "-o $GITEA_APP_INI : echo 'Stubbed environment-to-ini was called!'"
+    "--config $GITEA_APP_INI --in-place : echo 'Stubbed environment-to-ini was called!'"
 }

 function execute_test_script() {
@@ -0,0 +1,74 @@
+suite: Test httproute.yaml
+templates:
+  - templates/gitea/httproute.yaml
+tests:
+  - it: should enable httproute when gateway.httpRoute.enabled is true
+    set:
+      gateway.httpRoute.enabled: true
+      gateway.httpRoute.annotations:
+        some-annotation: some-value
+      gateway.httpRoute.hostnames:
+        - example.com
+      gateway.httpRoute.parentRefs:
+        - name: traefik
+          sectionName: https
+          kind: Gateway
+      gateway.httpRoute.paths:
+        - path: /
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: HTTPRoute
+      - isAPIVersion:
+          of: gateway.networking.k8s.io/v1
+      - equal:
+          path: metadata.name
+          value: RELEASE-NAME-gitea
+      - equal:
+          path: metadata.annotations["some-annotation"]
+          value: some-value
+      - equal:
+          path: spec.hostnames[0]
+          value: "example.com"
+      - equal:
+          path: spec.parentRefs[0].name
+          value: "traefik"
+      - equal:
+          path: spec.parentRefs[0].kind
+          value: "Gateway"
+      - equal:
+          path: spec.parentRefs[0].sectionName
+          value: "https"
+      - equal:
+          path: spec.rules[0].matches[0].path.type
+          value: "PathPrefix"
+      - equal:
+          path: spec.rules[0].matches[0].path.value
+          value: "/"
+      - equal:
+          path: spec.rules[0].backendRefs[0].name
+          value: "RELEASE-NAME-gitea-http"
+      - equal:
+          path: spec.rules[0].backendRefs[0].port
+          value: 3000
+
+  - it: should not create httproute when gateway.httpRoute.enabled is false
+    set:
+      gateway.httpRoute.enabled: false
+    asserts:
+      - hasDocuments:
+          count: 0
+
+  - it: hostname using TPL
+    set:
+      global.giteaHostName: "gitea.example.com"
+      gateway.httpRoute.enabled: true
+      gateway.httpRoute.hostnames:
+        - "{{ .Values.global.giteaHostName }}"
+    asserts:
+      - isKind:
+          of: HTTPRoute
+      - equal:
+          path: spec.hostnames[0]
+          value: "gitea.example.com"
@@ -0,0 +1,19 @@
+suite: Test httproute with implicit path defaults
+templates:
+  - templates/gitea/httproute.yaml
+tests:
+  - it: should use default path and pathType when no paths are specified
+    set:
+      gateway.httpRoute.enabled: true
+      gateway.httpRoute.paths: []
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: HTTPRoute
+      - equal:
+          path: spec.rules[0].matches[0].path.type
+          value: "PathPrefix"
+      - equal:
+          path: spec.rules[0].matches[0].path.value
+          value: "/"
@@ -0,0 +1,56 @@
+suite: Test httproute with structured paths
+templates:
+  - templates/gitea/httproute.yaml
+tests:
+  - it: should work with a plain string path
+    set:
+      gateway.httpRoute.enabled: true
+      gateway.httpRoute.paths:
+        - /
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: HTTPRoute
+      - equal:
+          path: spec.rules[0].matches[0].path.type
+          value: "PathPrefix"
+      - equal:
+          path: spec.rules[0].matches[0].path.value
+          value: "/"
+
+  - it: should work with structured path definitions and per-path pathType
+    set:
+      gateway.httpRoute.enabled: true
+      gateway.httpRoute.paths:
+        - path: /
+        - path: /foo
+          pathType: Exact
+    asserts:
+      - hasDocuments:
+          count: 1
+      - isKind:
+          of: HTTPRoute
+      - equal:
+          path: spec.rules[0].matches[0].path.type
+          value: "PathPrefix"
+      - equal:
+          path: spec.rules[0].matches[0].path.value
+          value: "/"
+      - equal:
+          path: spec.rules[1].matches[0].path.type
+          value: "Exact"
+      - equal:
+          path: spec.rules[1].matches[0].path.value
+          value: "/foo"
+
+  - it: should allow overriding the default pathType
+    set:
+      gateway.httpRoute.enabled: true
+      gateway.httpRoute.pathType: Exact
+      gateway.httpRoute.paths:
+        - /
+    asserts:
+      - equal:
+          path: spec.rules[0].matches[0].path.type
+          value: "Exact"
@@ -12,3 +12,14 @@ tests:
    asserts:
      - failedTemplate:
          errorMessage: valkey and valkey-cluster cannot be enabled at the same time. Please only choose one.
+
+  - it: fails when trying to enable ingress and gateway httpRoute at the same time
+    set:
+      ingress:
+        enabled: true
+      gateway:
+        httpRoute:
+          enabled: true
+    asserts:
+      - failedTemplate:
+          errorMessage: You cannot enable both Ingress and HTTPRoute at the same time
@@ -177,6 +177,30 @@ ingress:
  #    hosts:
  #      - git.example.com

+## @section Gateway
+## @param gateway.httpRoute.enabled Enable HTTPRoute
+## @param gateway.httpRoute.annotations HTTPRoute annotations
+## @param gateway.httpRoute.hostnames HTTPRoute hostnames
+## @param gateway.httpRoute.parentRefs[0].name HTTPRoute Gateway name
+## @param gateway.httpRoute.parentRefs[0].sectionName HTTPRoute Gateway section name
+## @param gateway.httpRoute.parentRefs[0].kind HTTPRoute Gateway kind
+## @param gateway.httpRoute.pathType HTTPRoute path match type (PathPrefix, Exact, RegularExpression)
+## @param gateway.httpRoute.paths[0].path Default HTTPRoute path
+gateway:
+  httpRoute:
+    enabled: false
+    annotations: {}
+    hostnames:
+      - git.example.com
+    parentRefs:
+      - name: traefik
+        sectionName: https
+        kind: Gateway
+    pathType: PathPrefix
+    paths:
+      - path: /
+
+
 ## @section deployment
 #
 ## @param resources Kubernetes resources