Added gateway api specific yaml files

base-helm-configs/nginx-gateway-fabric/helm-overrides.yaml

@@ -38,7 +38,7 @@ nginxGateway:
   image:
     ## The NGINX Gateway Fabric image to use
     repository: ghcr.io/nginxinc/nginx-gateway-fabric
-    tag: 1.1.0
+    tag: 1.3.0
     pullPolicy: IfNotPresent
 
   securityContext:
@@ -55,7 +55,7 @@ nginx:
   ## The NGINX image to use
   image:
     repository: ghcr.io/nginxinc/nginx-gateway-fabric/nginx
-    tag: 1.1.0
+    tag: 1.3.0
     pullPolicy: IfNotPresent
 
   ## The lifecycle of the nginx container.
@@ -85,7 +85,7 @@ service:
   ## The type of service to create for the NGINX Gateway Fabric.
   type: LoadBalancer
   ## The externalTrafficPolicy of the service. The value Local preserves the client source IP.
-  externalTrafficPolicy: Local
+  externalTrafficPolicy: Cluster
   ## The annotations of the NGINX Gateway Fabric service.
   annotations:
     "metallb.universe.tf/address-pool": "openstack-external"

base-kustomize/barbican/base/barbican-routes.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: barbican-route
+  namespace: openstack
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "barbican.cluster.local"
+  rules:
+    - backendRefs:
+      - name: barbican-api
+        port: 9311

base-kustomize/barbican/base/kustomization.yaml

@@ -3,3 +3,4 @@ resources:
   - barbican-rabbitmq-queue.yaml
   - all.yaml
   - hpa-barbican-api.yaml
+  - barbican-routes.yaml

base-kustomize/cinder/base/cinder-routes.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: cinder-gateway-route
+  namespace: openstack
+  labels:
+    application: gateway-api
+    service: HTTPRoute
+    route: cinder
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cinder-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "cinder.cluster.local"
+  rules:
+    - backendRefs:
+      - name: cinder-api
+        port: 8776

base-kustomize/cinder/base/kustomization.yaml

@@ -4,3 +4,4 @@ resources:
   - all.yaml
   - hpa-cinder-scheduler.yaml
   - hpa-cinder-api.yaml
+  - cinder-routes.yaml

base-kustomize/gateway/grafana-routes.yaml

@@ -6,10 +6,13 @@ metadata:
 spec:
   parentRefs:
   - name: flex-gateway
-    sectionName: graf-https
+    sectionName: cluster-tls
     namespace: nginx-gateway
   hostnames:
-  - "grafana.sjc3.rackspacecloud.com"
+  - "grafana.cluster.local"
+  - "grafana"
+  - "grafana.grafana"
+  - "grafana.grafana.svc.cluster.local"
   rules:
     - backendRefs:
       - name: grafana

base-kustomize/gateway/nginx-gateway-fabric/internal-gateway-api.yaml

@@ -3,59 +3,28 @@ kind: Gateway
 metadata:
   name: flex-gateway
   namespace: nginx-gateway
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod-gw
+  annotations: # This is the name of the ClusterIssuer created in the previous step
+    cert-manager.io/cluster-issuer: flex-gateway-issuer
     acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
   gatewayClassName: nginx
   listeners:
-  - name: o3-http
+  - name: cluster-http
     port: 80
     protocol: HTTP
-    hostname: "*.sjc.ohthree.com"
+    hostname: "*.cluster.local"
     allowedRoutes:
       namespaces:
         from: All
-  - name: rackspacecloud-http
-    port: 80
-    protocol: HTTP
-    hostname: "*.sjc3.rackspacecloud.com"
-    allowedRoutes:
-      namespaces:
-        from: All
-  - name: am-https
-    hostname: "alertmanager.sjc.ohthree.com"
-    port: 443
-    protocol: HTTPS
-    allowedRoutes:
-      namespaces:
-        from: All
-    tls:
-      mode: Terminate
-      certificateRefs:
-      - kind: Secret
-        name: alertmanager-gw-tls-secret
-  - name: prom-https
-    hostname: "prometheus.sjc.ohthree.com"
-    port: 443
-    protocol: HTTPS
-    allowedRoutes:
-      namespaces:
-        from: All
-    tls:
-      mode: Terminate
-      certificateRefs:
-      - kind: Secret
-        name: prometheus-gw-tls-secret
-  - name: graf-https
-    hostname: "grafana.sjc3.rackspacecloud.com"
+  - name: cluster-tls
     port: 443
     protocol: HTTPS
+    hostname: "*.cluster.local"
     allowedRoutes:
       namespaces:
         from: All
     tls:
       mode: Terminate
       certificateRefs:
       - kind: Secret
-        name: grafana-gw-tls-secret
+        name: wildcard-cluster-tls-secret

base-kustomize/gateway/nginx-gateway-fabric/internal-gateway-issuer.yaml

@@ -0,0 +1,7 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: flex-gateway-issuer
+  namespace: nginx-gateway
+spec:
+  selfSigned: {}

base-kustomize/gateway/nginx-gateway-fabric/kustomization.yaml

@@ -1,4 +1,5 @@
 resources:
   - internal-gateway-api.yaml # namespace: nginx-gateway (common gateway)
+  - internal-gateway-issuer.yaml #namespace: nginx-gateway
   - alertmanager-routes.yaml  # namespace: prometheus
   - prometheus-routes.yaml    # namespace: prometheus

base-kustomize/glance/base/client-settings.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: gateway.nginx.org/v1alpha1
+kind: ClientSettingsPolicy
+metadata:
+  name: gateway-client-settings
+  namespace: nginx-gateway
+spec:
+  targetRef:
+    group: gateway.networking.k8s.io
+    kind: Gateway
+    name: flex-gateway
+  body:
+    maxSize: "120g" # sizes without a unit are bytes.

base-kustomize/glance/base/glance-routes.yaml

@@ -0,0 +1,20 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: glance-gateway-route
+  namespace: openstack
+  labels:
+    application: gateway-api
+    service: HTTPRoute
+    route: glance
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "glance.cluster.local"
+  rules:
+    - backendRefs:
+      - name: glance-api
+        port: 9292

base-kustomize/glance/base/kustomization.yaml

@@ -3,6 +3,8 @@ resources:
   - glance-rabbitmq-queue.yaml
   - all.yaml
   - hpa-glance-api.yaml
+  - glance-routes.yaml
+  - client-settings.yaml
 
 patches:
   - target:

base-kustomize/heat/base/heat-routes.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: cloudformation-gateway-route
+  namespace: openstack
+  labels:
+    application: gateway-api
+    service: HTTPRoute
+    route: cloudformation
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "cloudformation.cluster.local"
+  rules:
+    - backendRefs:
+      - name: heat-cfn
+        port: 8000
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: heat-gateway-route
+  namespace: openstack
+  labels:
+    application: gateway-api
+    service: HTTPRoute
+    route: heat
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "heat.cluster.local"
+  rules:
+    - backendRefs:
+      - name: heat-api
+        port: 8004

base-kustomize/heat/base/kustomization.yaml

@@ -5,3 +5,4 @@ resources:
   - hpa-heat-api.yaml
   - hpa-heat-cfn.yaml
   - hpa-heat-engine.yaml
+  - heat-routes.yaml

base-kustomize/keystone/base/keystone-routes.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: keystone-gateway-route
+  namespace: openstack
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "keystone.cluster.local"
+  rules:
+    - backendRefs:
+      - name: keystone-api
+        port: 5000

base-kustomize/keystone/base/kustomization.yaml

@@ -3,3 +3,4 @@ resources:
   - keystone-rabbitmq-queue.yaml
   - all.yaml
   - hpa-keystone-api.yaml
+  - keystone-routes.yaml

base-kustomize/neutron/base/kustomization.yaml

@@ -3,6 +3,7 @@ resources:
   - neutron-rabbitmq-queue.yaml
   - all.yaml
   - hpa-neutron-server.yaml
+  - neutron-routes.yaml
 
 patches:
   - target:

base-kustomize/neutron/base/neutron-routes.yaml

@@ -0,0 +1,20 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: neutron-gateway-route
+  namespace: openstack
+  labels:
+    application: gateway-api
+    service: HTTPRoute
+    route: neutron
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "neutron.cluster.local"
+  rules:
+    - backendRefs:
+      - name: neutron-server
+        port: 9696

base-kustomize/octavia/base/kustomization.yaml

@@ -4,6 +4,7 @@ resources:
   - all.yaml
   - hpa-octavia-api.yaml
   - hpa-octavia-worker.yaml
+  - octavia-routes.yaml
 
 # To run the OVN driver, the octavia-api container must have an agent container within the same pod.
 patches:

base-kustomize/octavia/base/octavia-routes.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: octavia-api
+  namespace: openstack
+  labels:
+    application: gateway-api
+    service: HTTPRoute
+    route: octavia
+spec:
+  parentRefs:
+  - name: flex-gateway
+    sectionName: cluster-tls
+    namespace: nginx-gateway
+  hostnames:
+  - "octavia.cluster.local"
+  rules:
+    - backendRefs:
+      - name: octavia-api
+        port: 9876

base-kustomize/placement/base/kustomization.yaml

@@ -2,3 +2,4 @@ resources:
   - placement-mariadb-database.yaml
   - all.yaml
   - hpa-placement-api.yaml
+  - placement-nova-routes.yaml