Add Pixie cloud traefik Ingress overlay (#2400)

Author: ddelnano

k8s/cloud/overlays/exposed_services_traefik/api_service.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: api-service
+  annotations:
+    traefik.ingress.kubernetes.io/service.serverstransport: plc-cloud-backend-transport@kubernetescrd
+    traefik.ingress.kubernetes.io/service.serversscheme: https

k8s/cloud/overlays/exposed_services_traefik/cloud_ingress.yaml

@@ -0,0 +1,76 @@
+## Replace all occurrences of pixie.example.com with the custom domain name you wish to use
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: cloud-ingress
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - pixie.example.com
+    - work.pixie.example.com
+    secretName: cloud-proxy-tls-certs
+  rules:
+  - host: pixie.example.com
+    http:
+      paths:
+      - path: /px.services
+        pathType: Prefix
+        backend:
+          service:
+            name: vzconn-service
+            port:
+              number: 51600
+      - path: /px.cloudapi
+        pathType: Prefix
+        backend:
+          service:
+            name: api-service
+            port:
+              number: 51200
+      - path: /px.api
+        pathType: Prefix
+        backend:
+          service:
+            name: cloud-proxy-service
+            port:
+              number: 4444
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: cloud-proxy-service
+            port:
+              number: 443
+  - host: work.pixie.example.com
+    http:
+      paths:
+      - path: /px.services
+        pathType: Prefix
+        backend:
+          service:
+            name: vzconn-service
+            port:
+              number: 51600
+      - path: /px.cloudapi
+        pathType: Prefix
+        backend:
+          service:
+            name: api-service
+            port:
+              number: 51200
+      - path: /px.api
+        pathType: Prefix
+        backend:
+          service:
+            name: cloud-proxy-service
+            port:
+              number: 4444
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: cloud-proxy-service
+            port:
+              number: 443

k8s/cloud/overlays/exposed_services_traefik/kustomization.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+resources:
+- proxy_service.yaml
+- vzconn_service.yaml
+- cloud_ingress.yaml
+- servers_transport.yaml
+patches:
+- path: api_service.yaml
+  target:
+    kind: Service
+    name: api-service

k8s/cloud/overlays/exposed_services_traefik/proxy_service.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: cloud-proxy-service
+  annotations:
+    traefik.ingress.kubernetes.io/service.serverstransport: plc-cloud-backend-transport@kubernetescrd
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+spec:
+  type: ClusterIP
+  ports:
+  - port: 443
+    protocol: TCP
+    targetPort: 56000
+    name: tcp-https
+  - port: 4444
+    protocol: TCP
+    targetPort: 56004
+    name: tcp-grcp-web
+  - port: 5555
+    protocol: TCP
+    targetPort: 56000
+    name: tcp-http2
+  selector:
+    name: cloud-proxy-server

k8s/cloud/overlays/exposed_services_traefik/servers_transport.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: cloud-backend-transport
+spec:
+  serverName: pixie.example.com
+  insecureSkipVerify: true

k8s/cloud/overlays/exposed_services_traefik/vzconn_service.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: vzconn-service
+  annotations:
+    traefik.ingress.kubernetes.io/service.serverstransport: plc-cloud-backend-transport@kubernetescrd
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+spec:
+  type: ClusterIP
+  ports:
+  - port: 51600
+    protocol: TCP
+    targetPort: 51600
+    name: tcp-http2
+  selector:
+    name: vzconn-server