Merge branch '302-envoy-ui-configuration' into 'master'

feat: open port to provide access to a local UI instance (#302)

Closes #302

See merge request postgres-ai/database-lab!368

Author: agneum

packer/envoy.yaml

@@ -43,6 +43,18 @@ static_resources:
               socket_address:
                 address: 0.0.0.0
                 port_value: 2345
+  - name: dle-ui-http
+    type: STRICT_DNS
+    connect_timeout: 1s
+    load_assignment:
+      cluster_name: dle-ui-http
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: 0.0.0.0
+                port_value: 2346
   - name: joe-api-http
     type: STRICT_DNS
     connect_timeout: 1s
@@ -231,3 +243,37 @@ static_resources:
                 filename: "/etc/envoy/certs/fullchain1.pem"
               private_key:
                 filename: "/etc/envoy/certs/privkey1.pem"
+  - address:
+      socket_address:
+        address: 0.0.0.0
+        port_value: 446
+    filter_chains:
+      - filters:
+          - name: envoy.filters.network.http_connection_manager
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+              codec_type: AUTO
+              stat_prefix: ingress_http
+              route_config:
+                name: local_route
+                virtual_hosts:
+                  - name: ui
+                    domains:
+                      - "*"
+                    routes:
+                      - match:
+                          prefix: "/"
+                        route:
+                          cluster: dle-ui-http
+              http_filters:
+                - name: envoy.filters.http.router
+        transport_socket:
+          name: envoy.transport_sockets.tls
+          typed_config:
+            "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
+            common_tls_context:
+              tls_certificates:
+                certificate_chain:
+                  filename: "/etc/envoy/certs/fullchain1.pem"
+                private_key:
+                  filename: "/etc/envoy/certs/privkey1.pem"