From 0c4b73d49905b50780e36800c1c31f88cbe2ea89 Mon Sep 17 00:00:00 2001
From: Jeffrey Smeets <jeffreysmeets@jsme.be>
Date: Wed, 3 Jun 2026 16:24:42 +0200
Subject: [PATCH] Add ClientTrafficPolicy for MinIO console listener to fix
 download timeouts

---
 envoy-gateway/kustomization.yaml                  |  1 +
 .../minio-aistor/console-client-traffic.yaml      | 15 +++++++++++++++
 2 files changed, 16 insertions(+)
 create mode 100644 envoy-gateway/minio-aistor/console-client-traffic.yaml

diff --git a/envoy-gateway/kustomization.yaml b/envoy-gateway/kustomization.yaml
index 34633ed..6d70a1b 100644
--- a/envoy-gateway/kustomization.yaml
+++ b/envoy-gateway/kustomization.yaml
@@ -8,6 +8,7 @@ resources:
   # Policies
   - pelican/wings-client-traffic.yaml
   - minio-aistor/client-traffic.yaml
+  - minio-aistor/console-client-traffic.yaml
 
   # Certificates
   - authentik/certificate.yaml
diff --git a/envoy-gateway/minio-aistor/console-client-traffic.yaml b/envoy-gateway/minio-aistor/console-client-traffic.yaml
new file mode 100644
index 0000000..7fe5c8c
--- /dev/null
+++ b/envoy-gateway/minio-aistor/console-client-traffic.yaml
@@ -0,0 +1,15 @@
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: ClientTrafficPolicy
+metadata:
+  name: minio-aistor-console-client-traffic
+  namespace: envoy-gateway
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: gateway-internal
+      sectionName: minio-aistor-console
+  timeout:
+    http:
+      requestReceivedTimeout: 0s
+      idleTimeout: 3600s