feat: add envoy-router-test chart for smoke testing

Creates configurable pp-* pods (hashicorp/http-echo) labelled for
envoy-router, plus an internal ALB Ingress routing test-pp.dev.comet.com
to the Envoy Gateway service.

Usage:
  # discover gateway service
  kubectl get svc -n <ns> -l gateway.envoyproxy.io/owning-gateway-name=envoy-router

  helm install test charts/envoy-router-test \
    --namespace <ns> \
    --set ingress.gatewayService=<service-name>

  curl http://test-pp.dev.comet.com/pp-aaa/

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: obezpalko

charts/envoy-router-test/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v2
+name: envoy-router-test
+description: Test chart — creates pp-* pods and an internal ALB Ingress to validate envoy-router routing
+type: application
+version: 0.1.0

charts/envoy-router-test/templates/ingress.yaml

@@ -0,0 +1,28 @@
+{{- if .Values.ingress.gatewayService }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: envoy-router-test
+  namespace: {{ .Release.Namespace }}
+  annotations:
+    kubernetes.io/ingress.class: alb
+    alb.ingress.kubernetes.io/scheme: internal
+    alb.ingress.kubernetes.io/target-type: ip
+    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}]'
+spec:
+  rules:
+  - host: {{ .Values.ingress.host }}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .Values.ingress.gatewayService }}
+            port:
+              number: {{ .Values.ingress.gatewayServicePort }}
+{{- else }}
+# Ingress not created — set ingress.gatewayService to enable it.
+# Discover the Envoy Gateway service name with:
+#   kubectl get svc -n {{ .Release.Namespace }} -l gateway.envoyproxy.io/owning-gateway-name=envoy-router
+{{- end }}

charts/envoy-router-test/templates/pods.yaml

@@ -0,0 +1,26 @@
+{{- range .Values.pods }}
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pp-{{ .name }}
+  namespace: {{ $.Release.Namespace }}
+  labels:
+    envoy-router/enabled: "true"
+    app.kubernetes.io/managed-by: envoy-router-test
+spec:
+  containers:
+  - name: http-echo
+    image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag }}"
+    args:
+      - -listen=:{{ $.Values.podPort }}
+      - -text=hello from pp-{{ .name }}
+    ports:
+    - containerPort: {{ $.Values.podPort }}
+    readinessProbe:
+      httpGet:
+        path: /
+        port: {{ $.Values.podPort }}
+      initialDelaySeconds: 2
+      periodSeconds: 5
+{{- end }}

charts/envoy-router-test/values.yaml

@@ -0,0 +1,23 @@
+# Test pods to create. Each becomes a pp-<name> pod routable at /<name>.
+pods:
+  - name: aaa
+  - name: bbb
+  - name: ccc
+
+# HTTP echo image — responds with the pod name
+image:
+  repository: hashicorp/http-echo
+  tag: latest
+
+# Port the echo server listens on — must match envoy-router operator.podPort
+podPort: 8080
+
+# Ingress — internal ALB forwarding the test domain to the Envoy Gateway service
+ingress:
+  host: test-pp.dev.comet.com
+
+  # Envoy Gateway generates a Service per Gateway.
+  # Discover it with: kubectl get svc -n <namespace> -l gateway.envoyproxy.io/owning-gateway-name=envoy-router
+  # Then set this to the generated service name.
+  gatewayService: ""
+  gatewayServicePort: 80