Gateway management in APIGateway CR

[strekm]

Description

API Gateway modules comes with default kyma gateway for a quick start. We encourage our users to configure their gateway with their own domain to serve production ready applications. So far gateway creation and configuration is only covered by documentation.

Describe proces should be automated and simplified byt extending APIGateway CRD. There should be possibility to create and configure Istio Gateway CR. Simple and mutual TLS should be supported, either with certificate provided by user as well as generated using Gardener Certificates.

TODO:

• API proposal
• implementation
• rollout

Reasons

Simplify flow of Istio Gateway creation

Attachments
https://github.com/kyma-project/api-gateway/blob/main/docs/user/tutorials/01-20-set-up-tls-gateway.md
https://github.com/kyma-project/api-gateway/blob/main/docs/user/tutorials/01-30-set-up-mtls-gateway.md

[pbochynski]

Please include this use case: Create gateway with multiple hosts and mtls

[ptesny]

I have added the fully fledged custom domains and gateways with multiple hosts and mtls to the btp runtime context automation...

• https://gist.github.com/ptesny/be81b8f9c6a07f021284ab13ce5670cd#file-expose-and-secure-kyma-workloads-with-client-certificates-and-kyma-system-defined-mtls-gateways-md
• https://gist.github.com/ptesny/d3fbbad2e7b6896d951ee95ea5e07447#file-mtls-gateways-with-custom-business-domains-md

However, that should rather part of the future btp kyma runtime environment configuration so kyma API gateway CR can self-configure accordingly during the kyma cluster provisioning