add traefik as gateway api controller

deploy_control_plane.yaml

@@ -8,6 +8,8 @@
       tags: always
     - name: ingress-controller
       tags: ingress-controller
+    - name: gateway-api-controller
+      tags: gateway-api-controller
     - name: metal-roles/control-plane/roles/prepare
       tags: prepare
     - name: metal-roles/control-plane/roles/nsq

roles/gateway-api-controller/defaults/main.yaml

@@ -0,0 +1,9 @@
+---
+gateway_api_http_port: 8080
+gateway_api_https_port: 4443
+
+gateway_api_additional_config: {}
+gateway_api_tcp_service_exposals: {}
+gateway_api_udp_service_exposals: {}
+
+gateway_api_controller_chart_version: 39.0.7

roles/gateway-api-controller/tasks/main.yaml

@@ -0,0 +1,16 @@
+---
+- name: Add traefik repo
+  kubernetes.core.helm_repository:
+    name: traefik
+    repo_url: https://traefik.github.io/charts
+    force_update: true
+
+- name: Deploy traefik gateway-api controller
+  kubernetes.core.helm:
+    chart_version: "{{ gateway_api_controller_chart_version | default(omit) }}"
+    chart_ref: traefik/traefik
+    name: traefik
+    release_namespace: gateway-api-traefik
+    create_namespace: true
+    values: "{{ lookup('template', 'values.yaml') | from_yaml }}"
+    wait: true

roles/gateway-api-controller/templates/values.yaml

@@ -0,0 +1,19 @@
+---
+providers:
+  kubernetesGateway:
+    enabled: true
+    experimentalChannel: true # NOTE: this is needed to enable TCPRoute CRDs
+
+hostNetwork: true
+# because of host network, which binds the host port during rolling upgrade
+updateStrategy:
+  type: Recreate
+
+service:
+  enabled: true
+
+  type: ClusterIP
+
+  ports:
+    http: {{ gateway_api_http_port }}
+    https: {{ gateway_api_https_port }}