chore(k8s/magiclove/immich): add gateway

Author: uhthomas

k8s/magiclove/cnpg_system/BUILD.bazel

@@ -14,10 +14,12 @@ cue_library(
         "service_account_list.cue",
         "service_list.cue",
         "validating_webhook_configuration_list.cue",
+        "vm_pod_scrape_list.cue",
     ],
     importpath = "github.com/uhthomas/automata/k8s/magiclove/cnpg_system",
     visibility = ["//visibility:public"],
     deps = [
+        "//cue.mod/gen/github.com/VictoriaMetrics/operator/api/operator/v1beta1:cue_v1beta1_library",
         "//cue.mod/gen/k8s.io/api/admissionregistration/v1:cue_v1_library",
         "//cue.mod/gen/k8s.io/api/apps/v1:cue_v1_library",
         "//cue.mod/gen/k8s.io/api/core/v1:cue_v1_library",

k8s/magiclove/cnpg_system/vm_pod_scrape_list.cue

@@ -0,0 +1,19 @@
+package cnpg_system
+
+import operatorv1beta1 "github.com/VictoriaMetrics/operator/api/operator/v1beta1"
+
+#VMPodScrapeList: operatorv1beta1.#VMPodScrapeList & {
+	apiVersion: "operator.victoriametrics.com/v1beta1"
+	kind:       "VMPodScrapeList"
+	items: [...{
+		apiVersion: "operator.victoriametrics.com/v1beta1"
+		kind:       "VMPodScrape"
+	}]
+}
+
+#VMPodScrapeList: items: [{
+	spec: {
+		podMetricsEndpoints: [{port: "metrics"}]
+		selector: matchLabels: "app.kubernetes.io/name": #Name
+	}
+}]

k8s/magiclove/immich/BUILD.bazel

@@ -5,6 +5,8 @@ cue_library(
     srcs = [
         "cluster_list.cue",
         "external_secret_list.cue",
+        "gateway_list.cue",
+        "http_route_list.cue",
         "list.cue",
         "namespace_list.cue",
         "vm_pod_scrape_list.cue",
@@ -16,6 +18,7 @@ cue_library(
         "//cue.mod/gen/github.com/cloudnative-pg/cloudnative-pg/api/v1:cue_v1_library",
         "//cue.mod/gen/github.com/external-secrets/external-secrets/apis/externalsecrets/v1beta1:cue_v1beta1_library",
         "//cue.mod/gen/k8s.io/api/core/v1:cue_v1_library",
+        "//cue.mod/gen/sigs.k8s.io/gateway-api/apis/v1:cue_v1_library",
         "//k8s/magiclove/immich/machine_learning:cue_machine_learning_library",
         "//k8s/magiclove/immich/server:cue_server_library",
         "//k8s/magiclove/immich/valkey:cue_valkey_library",

k8s/magiclove/immich/gateway_list.cue

@@ -0,0 +1,37 @@
+package immich
+
+import gatewayv1 "sigs.k8s.io/gateway-api/apis/v1"
+
+#GatewayList: gatewayv1.#GatewayList & {
+	apiVersion: "gateway.networking.k8s.io/v1"
+	kind:       "GatewayList"
+	items: [...{
+		apiVersion: "gateway.networking.k8s.io/v1"
+		kind:       "Gateway"
+	}]
+}
+
+#GatewayList: items: [{
+	metadata: {
+		name: #Name
+		annotations: {
+			"cert-manager.io/cluster-issuer":            "letsencrypt"
+			"external-dns.alpha.kubernetes.io/hostname": "\(#Name)-magiclove.hipparcos.net"
+		}
+	}
+	spec: {
+		gatewayClassName: "cilium"
+		listeners: [{
+			name:     "http"
+			hostname: "\(#Name)-magiclove.hipparcos.net"
+			port:     80
+			protocol: gatewayv1.#HTTPProtocolType
+		}, {
+			name:     "https"
+			hostname: "\(#Name)-magiclove.hipparcos.net"
+			port:     443
+			protocol: gatewayv1.#HTTPSProtocolType
+			tls: certificateRefs: [{name: "\(#Name)-tls"}]
+		}]
+	}
+}]

k8s/magiclove/immich/http_route_list.cue

@@ -0,0 +1,51 @@
+package immich
+
+import gatewayv1 "sigs.k8s.io/gateway-api/apis/v1"
+
+#HTTPRouteList: gatewayv1.#HTTPRouteList & {
+	apiVersion: "gateway.networking.k8s.io/v1"
+	kind:       "HTTPRouteList"
+	items: [...{
+		apiVersion: "gateway.networking.k8s.io/v1"
+		kind:       "HTTPRoute"
+	}]
+}
+
+#HTTPRouteList: items: [{
+	metadata: name: "\(#Name)-http"
+	spec: {
+		parentRefs: [{
+			name:        #Name
+			sectionName: "http"
+		}]
+		rules: [{
+			filters: [{
+				type: gatewayv1.#HTTPRouteFilterRequestRedirect
+				requestRedirect: {
+					scheme:     "https"
+					statusCode: 301
+				}
+			}]
+		}]
+	}
+}, {
+	metadata: name: "\(#Name)-https"
+	spec: {
+		parentRefs: [{
+			name:        #Name
+			sectionName: "https"
+		}]
+		rules: [{
+			matches: [{
+				path: {
+					type:  gatewayv1.#PathMatchPathPrefix
+					value: "/"
+				}
+			}]
+			backendRefs: [{
+				name: "\(#Name)-server"
+				port: 80
+			}]
+		}]
+	}
+}]

k8s/magiclove/immich/vm_pod_scrape_list.cue

@@ -0,0 +1,20 @@
+package immich
+
+import operatorv1beta1 "github.com/VictoriaMetrics/operator/api/operator/v1beta1"
+
+#VMPodScrapeList: operatorv1beta1.#VMPodScrapeList & {
+	apiVersion: "operator.victoriametrics.com/v1beta1"
+	kind:       "VMPodScrapeList"
+	items: [...{
+		apiVersion: "operator.victoriametrics.com/v1beta1"
+		kind:       "VMPodScrape"
+	}]
+}
+
+#VMPodScrapeList: items: [{
+	metadata: name: "immich-pg-db"
+	spec: {
+		podMetricsEndpoints: [{port: "metrics"}]
+		selector: matchLabels: "cnpg.io/cluster": "immich-pg-db"
+	}
+}]