Migrate on K8s Gateway API

charts/site-manager/templates/_helpers.tpl

@@ -8,7 +8,6 @@ Return the appropriate host for ingress.
     {{- printf "site-manager-%s.%s" .Release.Namespace .Values.CLOUD_PUBLIC_HOST }}
   {{- end -}}
 {{- end -}}
-
 {{/*
 Return the appropriate apiVersion for ingress.
 */}}
@@ -50,4 +49,3 @@ IP addresses used to generate SSL certificate with "Subject Alternative Name" fi
 {{- define "paas-geo-monitor.port" -}}
   {{- print ( default 8080 .Values.paasGeoMonitor.config.port ) -}}
 {{- end -}}
-

charts/site-manager/templates/backendtlspolicy.yaml

@@ -0,0 +1,23 @@
+{{- $hasHttpRouteApi := .Capabilities.APIVersions.Has "gateway.networking.k8s.io/v1" -}}
+{{- $isKubernetes := eq .Values.PAAS_PLATFORM "KUBERNETES" -}}
+{{- $backendTlsHostname := include "site-manager.ingress.host" . -}}
+{{- if and $hasHttpRouteApi $isKubernetes .Values.tls.enabled -}}
+apiVersion: gateway.networking.k8s.io/v1
+kind: BackendTLSPolicy
+metadata:
+  name: {{ .Chart.Name }}-backend-tls
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app: {{ .Chart.Name }}
+spec:
+  targetRefs:
+    - group: ""
+      kind: Service
+      name: {{ .Chart.Name }}
+  validation:
+    hostname: {{ $backendTlsHostname | quote }}
+    caCertificateRefs:
+      - group: ""
+        kind: Secret
+        name: sm-certs
+{{- end }}

charts/site-manager/templates/httproute.yaml

@@ -0,0 +1,31 @@
+{{- $hasHttpRouteApi := .Capabilities.APIVersions.Has "gateway.networking.k8s.io/v1" -}}
+{{- $isKubernetes := eq .Values.PAAS_PLATFORM "KUBERNETES" -}}
+{{- if and $hasHttpRouteApi $isKubernetes -}}
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: {{ .Chart.Name }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app: {{ .Chart.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: {{ .Values.httpRoute.gatewayName | quote }}
+      namespace: {{ .Values.httpRoute.gatewayNamespace | quote }}
+  hostnames:
+    - {{ include "site-manager.ingress.host" . | quote }}
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - group: ""
+          kind: Service
+          name: {{ .Chart.Name }}
+          port: 443
+          weight: 1
+{{- end }}

charts/site-manager/templates/ingress.yaml

@@ -1,9 +1,13 @@
+{{- if .Values.ingress.create }}
 apiVersion: {{ include "site-manager.ingress.apiVersion" . }}
 kind: Ingress
 metadata:
   name: {{ .Chart.Name }}
   namespace: {{ .Release.Namespace }}
   annotations:
+    # Prevent gateway-api-converter from auto-converting this legacy Ingress
+    # when Gateway API resources (HTTPRoute, etc) are managed by chart.
+    gateway-api-converter.netcracker.com/ignore: "true"
     {{- if .Values.tls.enabled }}
     nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
     {{- if .Values.tls.defaultIngressTls }}
@@ -44,3 +48,4 @@ spec:
             port:
               number: 443
   {{- end }}
+{{- end }}

charts/site-manager/values.yaml

@@ -56,6 +56,14 @@ ingress:
   name: ""
   className: ""
 
+# Gateway API (HTTPRoute) configuration.
+# Resources are created only when:
+# 1) gateway.networking.k8s.io/v1 CRDs are present
+# 2) PAAS_PLATFORM=KUBERNETES
+httpRoute:
+  gatewayName: default-external-gateway
+  gatewayNamespace: envoy-gateway
+
 limits:
   cpu: "20m"
   memory: "100Mi"