Add Beta GatewayAPI support with Envoy Gateway

Clemens Beckrequested to merge
cb-gateway-api-example into master

What does this MR do?

  • Support deploying a Gateway and Routes for core components, including SSH support.
  • Bundle envoy gateway which can be enabled optionally.
  • Test deploying gateway resources and envoy in a vcluster review environment.
  • Support managing certificates with the bundled certmanager through Gateway API.

What does this MR not do?

  • Support: This MR does not introduce full support/validation for MinIO. Support for Gateway API and Envoy via GitLab chart remains experimental as no validation for Geo or other reference architectures was done.
  • MinIO: The MinIO chart is updated to be exposed via Gateway API. This is only for internal testing and PoC setups and should not be used in production, no matter the maturity of Gateway API in general.
  • Webservice: Exposing multiple webservice services/deployments via the webservice HTTPRoute is currently not possible.
  • Remove/Deprecate Ingress: Deploying Ingresses and the currently bundled Ingress controllers supported. Our deprecation timeline regarding NGINX Ingress is being discussed. Deploying Ingresses via the chart is not planned for deprecation or removal.

Related issues

Closes Support API GatewayAPI in helm chart (#5563) • Clemens Beck • 18.7

Relates https://gitlab.com/gitlab-com/gl-infra/software-delivery/operate/team-tasks/-/issues/13+s

Author checklist

For general guidance, please follow our Contributing guide.

Required

For anything in this list which will not be completed, please provide a reason in the MR discussion.

  • Merge Request Title and Description are up to date, accurate, and descriptive.
  • MR targeting the appropriate branch.
  • MR has a green pipeline.
  • Documentation created/updated.
  • Tests added/updated, and test plan for scenarios not covered by automated tests.
  • Equivalent MR/issue for omnibus-gitlab opened.

Reviewers checklist

Edited by Jason Plum

Merge request reports