chore: add internal (#1828)

Signed-off-by: Adrien <adrien@huggingface.co>

chart/env/prod.yaml

@@ -28,6 +28,20 @@ ingress:
     alb.ingress.kubernetes.io/target-node-labels: "role-hub-utils=true"
     kubernetes.io/ingress.class: "alb"
 
+ingressInternal:
+  enabled: true
+  path: "/chat"
+  annotations:
+    alb.ingress.kubernetes.io/group.name: hub-prod-internal-public
+    alb.ingress.kubernetes.io/healthcheck-path: "/healthcheck"
+    alb.ingress.kubernetes.io/listen-ports: "[{\"HTTP\": 80}, {\"HTTPS\": 443}]"
+    alb.ingress.kubernetes.io/group.order: "60"
+    alb.ingress.kubernetes.io/load-balancer-name: hub-prod-internal-public
+    alb.ingress.kubernetes.io/target-group-attributes: deregistration_delay.timeout_seconds=30
+    alb.ingress.kubernetes.io/target-node-labels: role-hub-lb=true
+    alb.ingress.kubernetes.io/target-type: ip
+    kubernetes.io/ingress.class: "alb"
+
 envVars:
   ADDRESS_HEADER: 'X-Forwarded-For'
   ADMIN_CLI_LOGIN: "false"
@@ -545,7 +559,7 @@ envVars:
           "max_new_tokens": 256
         }
         }
-      
+
 
   TEXT_EMBEDDING_MODELS: >
     [{

chart/templates/ingress-internal.yaml

@@ -0,0 +1,32 @@
+{{- if $.Values.ingressInternal.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations: {{ toYaml .Values.ingressInternal.annotations | nindent 4 }}
+  labels: {{ include "labels.standard" . | nindent 4 }}
+  name: {{ include "name" . }}-internal
+  namespace: {{ .Release.Namespace }}
+spec:
+  {{ if $.Values.ingressInternal.className }}
+  ingressClassName: {{ .Values.ingressInternal.className }}
+  {{ end }}
+  {{- with .Values.ingressInternal.tls }}
+  tls:
+    - hosts:
+        - {{ $.Values.domain | quote }}
+      {{- with .secretName }}
+      secretName: {{ . }}
+      {{- end }}
+  {{- end }}
+  rules:
+    - host: {{ .Values.domain }}
+      http:
+        paths:
+          - backend:
+              service:
+                name: {{ include "name" . }}
+                port:
+                  name: http
+            path: {{ $.Values.ingressInternal.path | default "/" }}
+            pathType: Prefix
+{{- end }}

chart/values.yaml

@@ -31,6 +31,13 @@ ingress:
   tls: { }
     # secretName: XXX
 
+ingressInternal:
+  enabled: false
+  path: "/"
+  annotations: { }
+  # className: "nginx"
+  tls: { }
+
 resources:
   requests:
     cpu: 2