Merge pull request #2699 from sawsa307/redirect-example

Add examples for HTTP-to-HTTPS redirects.

Author: k8s-ci-robot

examples/standard/http-redirect-rewrite/gateway-redirect-http-https.yaml

@@ -0,0 +1,19 @@
+#$ Used in:
+#$ - site-src/guides/http-redirect-rewrite.md
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: redirect-gateway
+spec:
+  gatewayClassName: foo-lb
+  listeners:
+  - name: http
+    protocol: HTTP
+    port: 80
+  - name: https
+    protocol: HTTPS
+    port: 443
+    tls:
+      mode: Terminate
+      certificateRefs:
+      - name: redirect-example

examples/standard/http-redirect-rewrite/httproute-redirect-http.yaml

@@ -0,0 +1,18 @@
+#$ Used in:
+#$ - site-src/guides/http-redirect-rewrite.md
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: http-filter-redirect
+spec:
+  parentRefs:
+  - name: redirect-gateway
+    sectionName: http
+  hostnames:
+  - redirect.example
+  rules:
+  - filters:
+    - type: RequestRedirect
+      requestRedirect:
+        scheme: https
+        statusCode: 301

examples/standard/http-redirect-rewrite/httproute-redirect-https.yaml

@@ -1,15 +1,18 @@
 #$ Used in:
-#$ - site-src/api-types/httproute.md
-apiVersion: gateway.networking.k8s.io/v1beta1
+#$ - site-src/guides/http-redirect-rewrite.md
+apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-filter-redirect
+  name: https-route
+  labels:
+    gateway: redirect-gateway
 spec:
+  parentRefs:
+  - name: redirect-gateway
+    sectionName: https
   hostnames:
-    - redirect.example
+  - redirect.example
   rules:
-    - filters:
-        - type: RequestRedirect
-          requestRedirect:
-            scheme: https
-            statusCode: 301
+  - backendRefs:
+    - name: example-svc
+      port: 80

site-src/guides/http-redirect-rewrite.md

@@ -21,7 +21,7 @@ example, to issue a permanent redirect (301) from HTTP to HTTPS, configure
 `requestRedirect.statusCode=301` and `requestRedirect.scheme="https"`:
 
 ```yaml
-{% include 'standard/http-redirect-rewrite/httproute-redirect-https.yaml' %}
+{% include 'standard/http-redirect-rewrite/httproute-redirect-http.yaml' %}
 ```
 
 Redirects change configured URL components to match the redirect configuration
@@ -31,6 +31,32 @@ example, the request `GET http://redirect.example/cinnamon` will result in a
 hostname (`redirect.example`), path (`/cinnamon`), and port (implicit) remain
 unchanged.
 
+### HTTP-to-HTTPS redirects
+
+To redirect HTTP traffic to HTTPS, you need to have a Gateway with both HTTP
+and HTTPS listeners.
+
+```yaml
+{% include 'standard/http-redirect-rewrite/gateway-redirect-http-https.yaml' %}
+```
+There are multiple ways to secure a Gateway. In this example, it is secured
+using a Kubernetes Secret(`redirect-example` in the `certificateRefs` section).
+
+You need a HTTPRoute that attaches to the HTTP listener and does the redirect
+to HTTPS. Here we set `sectionName` to be `http` so it only selects the
+listener named `http`.
+
+```yaml
+{% include 'standard/http-redirect-rewrite/httproute-redirect-http.yaml' %}
+```
+
+You also need a HTTPRoute that attaches to the HTTPS listener that forwards
+HTTPS traffic to application backends.
+
+```yaml
+{% include 'standard/http-redirect-rewrite/httproute-redirect-https.yaml' %}
+```
+
 ### Path redirects
 
 Path redirects use an HTTP Path Modifier to replace either entire paths or path