From fdc0a660a3f953887ee8f5d5e9ddbc3a4e1a95cc Mon Sep 17 00:00:00 2001
From: Staffan Olsson <staffan@repos.se>
Date: Fri, 11 Jan 2019 20:39:35 +0100
Subject: [PATCH 1/2] Exposes pixy on a NodePort, analogous to kafka
 outside-services

---
 pixy/outside-services/pixy-nodeport-service.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 pixy/outside-services/pixy-nodeport-service.yml

diff --git a/pixy/outside-services/pixy-nodeport-service.yml b/pixy/outside-services/pixy-nodeport-service.yml
new file mode 100644
index 00000000..9522adf9
--- /dev/null
+++ b/pixy/outside-services/pixy-nodeport-service.yml
@@ -0,0 +1,14 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: pixy-nodeport
+  namespace: kafka
+spec:
+  selector:
+    app: pixy
+  ports:
+  - name: web
+    protocol: TCP
+    port: 80
+    nodePort: 32399
+  type: NodePort

From e60e3ddb8a69de01b8904de1f83521691aaab585 Mon Sep 17 00:00:00 2001
From: Staffan Olsson <staffan@repos.se>
Date: Fri, 11 Jan 2019 22:08:36 +0100
Subject: [PATCH 2/2] Adds a proxy to other cluster's pixy, matching the same
 service

selector as real pixy.

This is very experimental.
---
 pixy/outside-proxy/pixy-proxy.yaml | 92 ++++++++++++++++++++++++++++++
 1 file changed, 92 insertions(+)
 create mode 100644 pixy/outside-proxy/pixy-proxy.yaml

diff --git a/pixy/outside-proxy/pixy-proxy.yaml b/pixy/outside-proxy/pixy-proxy.yaml
new file mode 100644
index 00000000..f485c10c
--- /dev/null
+++ b/pixy/outside-proxy/pixy-proxy.yaml
@@ -0,0 +1,92 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pixy-proxy
+  namespace: kafka
+  labels:
+    app: pixy
+spec:
+  replicas: 2
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 0
+      maxSurge: 1
+  selector:
+    matchLabels:
+      app: pixy
+  template:
+    metadata:
+      labels:
+        app: pixy
+    spec:
+      containers:
+      - name: routing
+        image: envoyproxy/envoy:v1.9.0@sha256:36fa7662386ed6db1d3fe7bcfab7cdeb9d2aeceabe0f0e96f5af202e9e3db556
+        ports:
+        - containerPort: 80
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: 80
+        command:
+        - /usr/local/bin/envoy
+        - --v2-config-only
+        - -l info
+        args:
+        - --config-yaml
+        - |
+          static_resources:
+            listeners:
+            - address:
+                socket_address:
+                  address: 0.0.0.0
+                  port_value: 80
+              filter_chains:
+              - filters:
+                - name: envoy.http_connection_manager
+                  config:
+                    codec_type: auto
+                    stat_prefix: ingress_http
+                    route_config:
+                      name: pixy_route
+                      virtual_hosts:
+                      - name: service
+                        domains:
+                        - "*"
+                        routes:
+                        - match:
+                            prefix: "/"
+                          route:
+                            cluster: pixy-elsewhere
+                    http_filters:
+                    - name: envoy.health_check
+                      config:
+                        pass_through_mode: false
+                        headers:
+                          name: :path
+                          exact_match: /healthz
+                    - name: envoy.router
+                      config: {}
+            clusters:
+            - name: pixy-elsewhere
+              connect_timeout: 2s
+              type: strict_dns
+              lb_policy: round_robin
+              hosts:
+              # Add a couple of node IPs here, with the NodePort from ../outside-services/
+              - socket_address:
+                  address: 
+                  port_value: 32399
+              - socket_address:
+                  address: 
+                  port_value: 32399
+              - socket_address:
+                  address: 
+                  port_value: 32399
+          admin:
+            access_log_path: "/dev/null"
+            address:
+              socket_address:
+                address: 0.0.0.0
+                port_value: 8081