add gateway example files (#609)

Author: PingDavidR

30-helm/gateway/gateway-demo.yaml

@@ -0,0 +1,86 @@
+# Gateway overlay values for the demo deployment.
+# Use with:
+# helm upgrade --install demo charts/ping-devops \
+#   --namespace pinghelm \
+#   -f sample/everything.yaml \
+#   -f sample/gateway-demo.yaml
+
+global:
+  gateway:
+    enabled: true
+    addReleaseNameToHost: prepend
+    defaultDomain: pingdemo.example
+    parentRefs:
+    - name: ping-devops-gateway
+      namespace: pinghelm
+      sectionName: https
+
+pingaccess-admin:
+  gateway:
+    hosts:
+    - host: pingaccess-admin._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https
+
+pingaccess-engine:
+  gateway:
+    hosts:
+    - host: pingaccess-engine._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https
+
+pingdataconsole:
+  gateway:
+    hosts:
+    - host: pingdataconsole._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https
+
+pingauthorize:
+  gateway:
+    hosts:
+    - host: pingauthorize._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https
+
+pingdirectory:
+  gateway:
+    hosts:
+    - host: pingdirectory._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https
+
+pingfederate-admin:
+  gateway:
+    hosts:
+    - host: pingfederate-admin._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https
+
+pingfederate-engine:
+  gateway:
+    hosts:
+    - host: pingfederate-engine._defaultDomain_
+      paths:
+      - path: /
+        pathType: PathPrefix
+        backend:
+          serviceName: https

30-helm/gateway/gateway.yaml

@@ -0,0 +1,20 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: ping-devops-gateway
+  namespace: pinghelm
+spec:
+  gatewayClassName: traefik
+  listeners:
+  - name: https
+    protocol: HTTPS
+    port: 8443
+    hostname: "*.pingdemo.example"
+    tls:
+      mode: Terminate
+      certificateRefs:
+      - kind: Secret
+        name: pingdemo-example-tls
+    allowedRoutes:
+      namespaces:
+        from: Same

30-helm/gateway/traefik-values-clusterip.yaml

@@ -0,0 +1,10 @@
+# Exposure override for local port-forward workflows.
+# Use with:
+# helm upgrade --install traefik traefik/traefik -n traefik --create-namespace \
+#   -f sample/traefik-values.yaml -f sample/traefik-values-clusterip.yaml
+# Then expose locally:
+# kubectl -n traefik port-forward svc/traefik 8443:443
+# or (to keep hostname URLs on :443) sudo kubectl -n traefik port-forward svc/traefik 443:443
+
+service:
+  type: ClusterIP

30-helm/gateway/traefik-values-nodeport.yaml

@@ -0,0 +1,13 @@
+# Exposure override for local clusters (Docker Desktop, kind, etc.).
+# Use with:
+# helm upgrade --install traefik traefik/traefik -n traefik --create-namespace \
+#   -f sample/traefik-values.yaml -f sample/traefik-values-nodeport.yaml
+
+service:
+  type: NodePort
+
+ports:
+  web:
+    nodePort: 30080
+  websecure:
+    nodePort: 30443

30-helm/gateway/traefik-values.yaml

@@ -0,0 +1,13 @@
+# Dev-only: skip upstream TLS verification so self-signed Ping certs work behind Traefik.
+# NOT FOR PRODUCTION USE.
+additionalArguments:
+  - "--serversTransport.insecureSkipVerify=true"
+
+providers:
+  kubernetesGateway:
+    enabled: true
+
+ingressClass:
+  enabled: true
+  isDefaultClass: false
+  name: traefik