fix: traefik gateway api support with sticky session (#1660)

Co-authored-by: houseme <housemecn@gmail.com>

helm/rustfs/templates/gateway-api/gateway.yml

@@ -18,6 +18,6 @@ spec:
       tls:
         mode: Terminate
         certificateRefs:
-          - name: {{ .Values.gatewayApi.secretName }}
+          - name: {{ .Values.ingress.tls.secretName }}
             kind: Secret
 {{- end }}

helm/rustfs/templates/gateway-api/httproute.yml

@@ -1,4 +1,4 @@
-{{- if .Values.gatewayApi.enabled -}}
+{{- if and .Values.gatewayApi.enabled (eq .Values.gatewayApi.gatewayClass "traefik") }}
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
@@ -21,6 +21,8 @@ spec:
             type: PathPrefix
             value: /
       backendRefs:
-        - name: rustfs-svc
-          port: 9001
-{{- end }}
+        - name: {{ include "rustfs.fullname" . }}-sticky-svc
+          port: {{ .Values.service.console.port }}
+          kind: TraefikService
+          group: traefik.io
+{{- end }}

helm/rustfs/templates/gateway-api/traefik-service.yaml

@@ -0,0 +1,19 @@
+{{- if eq .Values.gatewayApi.gatewayClass "traefik" }}
+apiVersion: traefik.io/v1alpha1
+kind: TraefikService
+metadata:
+  name: {{ include "rustfs.fullname" . }}-sticky-svc
+spec:
+  weighted:
+    services:
+      - name: {{ include "rustfs.fullname" . }}-svc
+        namespace: {{ .Release.Namespace }}
+        port: {{ .Values.service.console.port }}
+        weight: 1
+        sticky:
+          cookie:
+            name: rustfs
+            httpOnly: true
+            secure: true
+            sameSite: none
+{{- end }}

helm/rustfs/templates/secret-tls.yaml

@@ -1,4 +1,4 @@
-{{- if and (or .Values.gatewayApi.enabled .Values.ingress.tls.enabled) (not (or .Values.ingress.tls.certManager.enabled .Values.gatewayApi.existingGateway.name)) }}
+{{- if .Values.ingress.tls.enabled -}}
 apiVersion: v1
 kind: Secret
 metadata:

helm/rustfs/values.yaml

@@ -141,7 +141,6 @@ gatewayApi:
   enabled: false
   gatewayClass: traefik
   hostname: example.rustfs.com
-  secretName: secret-tls
   existingGateway:
     name: ""
     namespace: ""