feat: Gateway API support, in lieu of Ingress

.gitea/workflows/commitlint.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   check-and-test:
     runs-on: ubuntu-latest
-    container: commitlint/commitlint:21.0.2
+    container: commitlint/commitlint:21.2.0
     steps:
       - uses: actions/checkout@v7
       - name: check PR title

Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 18.7.6
+  version: 18.7.11
 - name: postgresql-ha
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 16.3.2
@@ -10,6 +10,6 @@ dependencies:
   version: 3.0.24
 - name: valkey
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 6.1.9
+  version: 6.1.14
-digest: sha256:b64f4fef8450b7d16263cdca87558e45cea2560990ad4ab3dd319e05709d12df
+digest: sha256:7eeedc92664d1fccceafeadd55d10090e67bc11e1961cbd8f62a92f51c84586a
-generated: "2026-06-20T00:01:35.832598614Z"
+generated: "2026-07-04T00:01:06.153107369Z"

Chart.yaml

@@ -4,7 +4,7 @@ description: (Unofficial) Gitea Helm chart for Kubernetes
 type: application
 version: 0.0.0
 # renovate datasource=github-releases depName=go-gitea/gitea extractVersion=^v(?<version>.*)$
-appVersion: 1.26.3
+appVersion: 1.26.4
 icon: https://gitea.com/assets/img/logo.svg
 
 annotations:
@@ -32,7 +32,7 @@ dependencies:
   # https://github.com/bitnami/charts/blob/main/bitnami/postgresql
   - name: postgresql
     repository: oci://registry-1.docker.io/bitnamicharts
-    version: 18.7.6
+    version: 18.7.11
     condition: postgresql.enabled
   # https://github.com/bitnami/charts/blob/main/bitnami/postgresql-ha/Chart.yaml
   - name: postgresql-ha
@@ -47,5 +47,5 @@ dependencies:
   # https://github.com/bitnami/charts/blob/main/bitnami/valkey/Chart.yaml
   - name: valkey
     repository: oci://registry-1.docker.io/bitnamicharts
-    version: 6.1.9
+    version: 6.1.14
     condition: valkey.enabled

package-lock.json

@@ -469,9 +469,9 @@
       }
     },
     "node_modules/linkify-it": {
-      "version": "5.0.1",
+      "version": "5.0.2",
-      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.2.tgz",
-      "integrity": "sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==",
+      "integrity": "sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==",
       "dev": true,
       "funding": [
         {
@@ -599,9 +599,9 @@
       }
     },
     "node_modules/markdownlint-cli/node_modules/brace-expansion": {
-      "version": "5.0.6",
+      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -1251,9 +1251,9 @@
       }
     },
     "node_modules/picomatch": {
-      "version": "4.0.4",
+      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
-      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
       "dev": true,
       "license": "MIT",
       "engines": {

templates/_helpers.tpl

@@ -471,3 +471,12 @@ https
 {{- define "gitea.metrics-secret-name" -}}
 {{ default (printf "%s-metrics-secret" (include "gitea.fullname" .)) }}
 {{- end -}}
+
+{{/*
+Validate that Ingress and Gateway HTTPRoute are not enabled at the same time
+*/}}
+{{- define "gitea.validate-ingress-gateway-conflict" -}}
+{{- if and ((.Values.ingress).enabled) (((.Values.gateway).httpRoute).enabled) -}}
+{{- fail "You cannot enable both Ingress and HTTPRoute at the same time" -}}
+{{- end -}}
+{{- end -}}

templates/gitea/httproute.yaml

@@ -0,0 +1,79 @@
+{{- include "gitea.validate-ingress-gateway-conflict" . }}
+{{- if .Values.gateway.httpRoute.enabled -}}
+{{- $fullName := include "gitea.fullname" . -}}
+{{- $httpPort := .Values.service.http.port -}}
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: {{ $fullName }}
+  namespace: {{ .Values.namespace | default .Release.Namespace }}
+  labels:
+    {{- include "gitea.labels" . | nindent 4 }}
+  annotations:
+    {{- range $key, $value := .Values.gateway.httpRoute.annotations }}
+      {{ $key }}: {{ $value | quote }}
+    {{- end }}
+spec:
+  hostnames:
+    {{- range .Values.gateway.httpRoute.hostnames }}
+    - {{ tpl . $ | quote }}
+    {{- end }}
+  parentRefs:
+    {{- range .Values.gateway.httpRoute.parentRefs }}
+    - name: {{ .name | quote }}
+      {{- if .namespace }}
+      namespace: {{ .namespace | quote }}
+      {{- end }}
+      {{- if .kind }}
+      kind: {{ .kind | quote }}
+      {{- end }}
+      {{- if .group }}
+      group: {{ .group | quote }}
+      {{- end }}
+      {{- if .sectionName }}
+      sectionName: {{ .sectionName | quote }}
+      {{- end }}
+      {{- if .port }}
+      port: {{ .port }}
+      {{- end }}
+    {{- end }}
+  rules:
+    {{- if .Values.gateway.httpRoute.paths }}
+    {{- range .Values.gateway.httpRoute.paths }}
+    {{- if kindIs "string" . }}
+    - matches:
+        - path:
+            type: {{ default "PathPrefix" $.Values.gateway.httpRoute.pathType }}
+            value: {{ . }}
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ $.Values.namespace | default $.Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- else }}
+    - matches:
+        - path:
+            type: {{ .pathType | default "PathPrefix" }}
+            value: {{ .path | default "/" }}
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ $.Values.namespace | default $.Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- end }}
+    {{- end }}
+    {{- else }}
+    - matches:
+        - path:
+            type: PathPrefix
+            value: "/"
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ $fullName }}-http
+          namespace: {{ .Values.namespace | default .Release.Namespace }}
+          port: {{ $httpPort }}
+    {{- end }}
+{{- end }}

templates/gitea/ingress.yaml

@@ -1,3 +1,4 @@
+{{- include "gitea.validate-ingress-gateway-conflict" . }}
 {{- if .Values.ingress.enabled -}}
 {{- $fullName := include "gitea.fullname" . -}}
 {{- $httpPort := .Values.service.http.port -}}

values.yaml

@@ -177,6 +177,27 @@ ingress:
   #    hosts:
   #      - git.example.com
 
+## @section Gateway
+## @param gateway.httpRoute.annotations HTTPRoute annotations
+## @param gateway.httpRoute.hostnames HTTPRoute hostnames
+## @param gateway.httpRoute.parentRefs HTTPRoute parentRefs
+## @param gateway.httpRoute.pathType HTTPRoute path match type (PathPrefix, Exact, RegularExpression)
+## @param gateway.httpRoute.paths[0].path Default HTTPRoute path
+gateway:
+  httpRoute:
+    enabled: false
+    annotations: {}
+    hostnames:
+      - git.example.com
+    parentRefs:
+      - name: traefik
+        sectionName: https
+        kind: Gateway
+    pathType: PathPrefix
+    paths:
+      - path: /
+
+
 ## @section deployment
 #
 ## @param resources Kubernetes resources