# Plain HTTP only redirects to HTTPS. cert-manager's HTTP-01 challenge
# routes name an exact hostname, so they win over this catch-all.
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: https-redirect
  namespace: envoy-gateway-system
spec:
  parentRefs:
  - name: homelab
    sectionName: http
  rules:
  - filters:
    - type: RequestRedirect
      requestRedirect:
        scheme: https
        statusCode: 301