local-dev: traefik: use file configuration

This means the docker socket doesn't need to be mounted into the traefik
container, at the cost/advantage of putting the config in separate files
instead of container labels.

Signed-off-by: Hank Donnay <hdonnay@redhat.com>

local-dev/traefik/config/clair.yaml

@@ -0,0 +1,40 @@
+---
+http:
+  entrypoint:
+    clair:
+      address: ':6060'
+  routers:
+    indexer:
+      entryPoints: [clair]
+      rule: 'PathPrefix(`/indexer`)'
+      service: indexer
+    matcher:
+      entryPoints: [clair]
+      rule: 'PathPrefix(`/matcher`)'
+      service: matcher
+    notifier:
+      entryPoints: [clair]
+      rule: 'PathPrefix(`/notifier`)'
+      service: notifier
+  services:
+    indexer:
+      loadBalancer:
+        servers:
+        - url: "http://clair-indexer:6060/"
+        healthCheck:
+          path: /healthz
+          port: 8089
+    matcher:
+      loadBalancer:
+        servers:
+        - url: "http://clair-matcher:6060/"
+        healthCheck:
+          path: /healthz
+          port: 8089
+    notifier:
+      loadBalancer:
+        servers:
+        - url: "http://clair-notifier:6060/"
+        healthCheck:
+          path: /healthz
+          port: 8089

local-dev/traefik/config/dashboard.yaml

@@ -0,0 +1,17 @@
+---
+http:
+  routers:
+    api:
+      entryPoints: [traefik]
+      rule: 'PathPrefix(`/api`) || PathPrefix(`/dashboard`)'
+      service: 'api@internal'
+    dashboard-redirect:
+      entryPoints: [traefik]
+      rule: 'Path(`/`)'
+      middlewares: [dashboard-redirect]
+      service: 'api@internal'
+  middlewares:
+    dashboard-redirect:
+      redirectRegex:
+        regex: '.*'
+        replacement: '${1}/dashboard/'

local-dev/traefik/config/grafana.yaml

@@ -0,0 +1,14 @@
+---
+http:
+  routers:
+    grafana:
+      entryPoints: [traefik]
+      rule: 'PathPrefix(`/grafana`)'
+      service: grafana
+  services:
+    grafana:
+      loadBalancer:
+        servers:
+        - url: "http://clair-grafana:3000/"
+        healthCheck:
+          path: /grafana/api/health

local-dev/traefik/config/jaeger.yaml

@@ -0,0 +1,14 @@
+---
+http:
+  routers:
+    jaeger:
+      entryPoints: [traefik]
+      rule: 'PathPrefix(`/jaeger`)'
+      service: jaeger
+  services:
+    jaeger:
+      loadBalancer:
+        servers:
+        - url: "http://clair-jaeger:16686/"
+        healthCheck:
+          path: /

local-dev/traefik/config/pgadmin.yaml

@@ -0,0 +1,14 @@
+---
+http:
+  routers:
+    pgadmin:
+      entryPoints: [traefik]
+      rule: 'PathPrefix(`/pgadmin`)'
+      service: pgadmin
+  services:
+    pgadmin:
+      loadBalancer:
+        servers:
+        - url: "http://clair-pgadmin/"
+        healthCheck:
+          path: /pgadmin

local-dev/traefik/config/postgresql.yaml

@@ -0,0 +1,13 @@
+---
+tcp:
+  routers:
+    postgresql:
+      entryPoints: [postgresql]
+      service: postgresql
+      # Traefik docs say this hack is needed if not using TLS.
+      rule: 'HostSNI(`*`)'
+  services:
+    postgresql:
+      loadBalancer:
+        servers:
+          - address: 'clair-database:5432'

local-dev/traefik/config/prom.yaml

@@ -0,0 +1,14 @@
+---
+http:
+  routers:
+    prom:
+      entryPoints: [traefik]
+      rule: 'PathPrefix(`/prom`)'
+      service: prom
+  services:
+    prom:
+      loadBalancer:
+        servers:
+        - url: "http://clair-prometheus:9090/"
+        healthCheck:
+          path: /prom/-/healthy

local-dev/traefik/traefik.yaml

@@ -0,0 +1,20 @@
+---
+global:
+  sendAnonymousUsage: false
+api:
+  insecure: false
+  dashboard: true
+entryPoints:
+  traefik:
+    address: ':8080'
+  clair:
+    address: ':6060'
+  postgresql:
+    address: ':5432'
+providers:
+  file:
+    directory: /etc/traefik/config
+metrics:
+  prometheus:
+    addServicesLabels: true
+accessLog: {}