fix: infrastructure gateways dependencies

clusters/mycluster-0/infrastructure.yaml

@@ -70,6 +70,7 @@ spec:
   dependsOn:
     - name: crossplane-providers
 ---
+# The infrastructure components are deployed when Crossplane is available in order to creates irsa resources
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
@@ -93,4 +94,23 @@ spec:
     name: flux-system
   dependsOn:
     - name: crossplane-configuration
+---
+# Gateways must be created after Kyverno's cluster policies are applied in order to add AWS annotations
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infrastructure-gateways
+  namespace: flux-system
+spec:
+  prune: true
+  interval: 4m0s
+  path: ./infrastructure/mycluster-0/gapi
+  postBuild:
+    substitute:
+      domain_name: "cloud.ogenki.io"
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  dependsOn:
+    - name: crds
     - name: security

infrastructure/base/gapi/platform-gateway.yaml

@@ -8,7 +8,7 @@ spec:
   gatewayClassName: cilium
   listeners:
     - name: http
-      hostname: "*.cloud.ogenki.io"
+      hostname: "*.${domain_name}"
       port: 443
       protocol: HTTPS
       allowedRoutes:

infrastructure/mycluster-0/gapi/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base/gapi

infrastructure/mycluster-0/kustomization.yaml

@@ -4,4 +4,3 @@ kind: Kustomization
 resources:
   - ../base/aws-load-balancer-controller
   - ../base/external-dns
-  - ../base/gapi