chore(deploy): prod lb and oia

deploy/prod/kustomization.yaml

@@ -4,6 +4,8 @@ kind: Kustomization
 resources:
   - ../base
   - hpa.yaml
+  - svc
+  - oia
 
 patches:
   - patch: |-

deploy/prod/oia/ingressroute/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - oia.yaml
+  - oia-no-rewrite.yaml

deploy/prod/oia/ingressroute/oia-no-rewrite.yaml

@@ -0,0 +1,25 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: xlog-oia-no-rewrite
+  namespace: crossbell
+spec:
+  entryPoints:
+    - web
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`oia.xlog.app`) && PathPrefix(`/_next`)
+      middlewares:
+        - name: xlog-oia-replace-host
+      services:
+        - name: xlog-internal
+          port: 3000
+    - kind: Rule
+      match: Host(`oia.xlog.app`) && PathPrefix(`/.well-known`)
+      middlewares:
+        - name: xlog-oia-add-prefix
+        - name: xlog-oia-replace-host
+      services:
+        - name: xlog-internal
+          port: 80

deploy/prod/oia/ingressroute/oia.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: xlog-oia
+  namespace: crossbell
+spec:
+  entryPoints:
+    - web
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`oia.xlog.app`) && !PathPrefix(`/_next`) && !PathPrefix(`/.well-known`)
+      middlewares:
+        - name: xlog-oia-replace-host
+        - name: xlog-replace-path-oia
+      services:
+        - name: xlog-internal
+          port: 80

deploy/prod/oia/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ingressroute
+  - middleware

deploy/prod/oia/middleware/add-prefix.yaml

@@ -0,0 +1,8 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: xlog-oia-add-prefix
+  namespace: crossbell
+spec:
+  addPrefix:
+    prefix: /oia

deploy/prod/oia/middleware/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - add-prefix.yaml
+  - oia-replace-host.yaml
+  - replace-path-oia.yaml

deploy/prod/oia/middleware/oia-replace-host.yaml

@@ -0,0 +1,10 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: xlog-oia-replace-host
+  namespace: crossbell
+spec:
+  headers:
+    customRequestHeaders:
+      Host: "xlog.app"
+      X-Forwarded-Host: "xlog.app"

deploy/prod/oia/middleware/replace-path-oia.yaml

@@ -0,0 +1,8 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: xlog-replace-path-oia
+  namespace: crossbell
+spec:
+  replacePath:
+    path: /oia

deploy/prod/svc/kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - lb-cname-01.yaml
+  - lb-main-01.yaml
+  - lb-wildcard-01.yaml
+
+commonAnnotations:
+  cloud.google.com/l4-rbs: "enabled"
+  networking.gke.io/internal-load-balancer-subnet: "prod-loadbalancer"
+  networking.gke.io/internal-load-balancer-allow-global-access: "true"

deploy/prod/svc/lb-cname-01.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: xlog-lb-cname-01
+  namespace: crossbell
+spec:
+  type: LoadBalancer
+  selector:
+    app: xlog-caddy
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: 80
+    - name: https
+      protocol: TCP
+      port: 443
+      targetPort: 443

deploy/prod/svc/lb-main-01.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: xlog-lb-main-01
+  namespace: crossbell
+spec:
+  type: LoadBalancer
+  selector:
+    app: xlog-caddy
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: 80
+    - name: https
+      protocol: TCP
+      port: 443
+      targetPort: 443

deploy/prod/svc/lb-wildcard-01.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: xlog-lb-wildcard-01
+  namespace: crossbell
+spec:
+  type: LoadBalancer
+  selector:
+    app: xlog-caddy
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: 80
+    - name: https
+      protocol: TCP
+      port: 443
+      targetPort: 443