feat: path based ingress routing for Flyte apps via Traefik + Knative

Dockerfile

@@ -17,6 +17,7 @@ COPY flyteplugins flyteplugins
 COPY flytestdlib flytestdlib
 COPY gen/go gen/go
 COPY actions actions
+COPY app app
 COPY events events
 COPY runs runs
 COPY cache_service cache_service

Makefile

@@ -31,37 +31,22 @@ build: verify ## Build all Go service binaries
 	$(MAKE) -C runs build
 	$(MAKE) -C executor build
 
-# =============================================================================
-# Sandbox Commands
-# =============================================================================
-
-.PHONY: sandbox-build
-sandbox-build: ## Build and start the flyte sandbox (docker/devbox-bundled)
-	$(MAKE) -C docker/devbox-bundled build
-
-# Run in dev mode with extra arg FLYTE_DEV=True
-.PHONY: sandbox-run
-sandbox-run: ## Start the flyte sandbox without rebuilding the image
-	$(MAKE) -C docker/devbox-bundled start
-
-.PHONY: sandbox-stop
-sandbox-stop: ## Stop the flyte sandbox
-	$(MAKE) -C docker/devbox-bundled stop
-
 # =============================================================================
 # Devbox Commands
 # =============================================================================
 
 .PHONY: devbox-build
-devbox-build: ## Build and start the flyte devbox cluster (docker/devbox-bundled)
+devbox-build: ## Build the flyte devbox image (docker/devbox-bundled)
 	$(MAKE) -C docker/devbox-bundled build
 
+# Run in dev mode with extra arg FLYTE_DEV=True
 .PHONY: devbox-run
-devbox-run: ## Start the flyte devbox cluster without rebuilding the image
-	$(MAKE) -C docker/devbox-bundled start
+devbox-run: ## Start the flyte devbox and install Knative with app routing config
+	$(MAKE) -C docker/devbox-bundled start FLYTE_DEV=$(FLYTE_DEV)
+	$(MAKE) -C docker/devbox-bundled setup-knative
 
 .PHONY: devbox-stop
-devbox-stop: ## Stop the flyte devbox cluster
+devbox-stop: ## Stop the flyte devbox
 	$(MAKE) -C docker/devbox-bundled stop
 
 .PHONY: help
@@ -83,10 +68,9 @@ sep:
 # Helper to time a step: $(call timed,step_name,command)
 define timed
 	@start=$$(date +%s); \
-	$(2); rc=$$?; \
+	$(2); \
 	elapsed=$$((  $$(date +%s) - $$start )); \
-	echo "⏱  $(1) completed in $${elapsed}s"; \
-	exit $$rc
+	echo "⏱  $(1) completed in $${elapsed}s"
 endef
 
 .PHONY: buf-dep

app/config/config.go

@@ -20,3 +20,55 @@ func DefaultAppConfig() *AppConfig {
 		CacheTTL:              30 * time.Second,
 	}
 }
+
+// InternalAppConfig holds configuration for the data plane InternalAppService.
+type InternalAppConfig struct {
+	// Enabled controls whether the InternalAppService is started.
+	Enabled bool `json:"enabled" pflag:",Enable app deployment controller"`
+
+	// BaseDomain is the base domain used to generate public URLs for apps.
+	// Apps are exposed at "{name}-{project}-{domain}.{base_domain}".
+	BaseDomain string `json:"baseDomain" pflag:",Base domain for app public URLs"`
+
+	// Scheme is the URL scheme used for public app URLs ("http" or "https").
+	// Defaults to "https" if unset.
+	Scheme string `json:"scheme" pflag:",URL scheme for app public URLs (http or https)"`
+
+	// DefaultRequestTimeout is the request timeout applied to apps that don't specify one.
+	DefaultRequestTimeout time.Duration `json:"defaultRequestTimeout" pflag:",Default request timeout for apps"`
+
+	// MaxRequestTimeout is the hard cap on request timeout (Knative max is 3600s).
+	MaxRequestTimeout time.Duration `json:"maxRequestTimeout" pflag:",Maximum allowed request timeout for apps"`
+
+	// IngressEnabled controls whether a Traefik IngressRoute and Middleware are
+	// created for each deployed app so it is reachable at
+	// {name}-{project}-{domain}.{IngressAppsDomain}:{IngressAppsPort} through Traefik.
+	// Enable this for sandbox/local setups where Traefik is the ingress controller.
+	IngressEnabled bool `json:"ingressEnabled" pflag:",Create Traefik IngressRoute for each app"`
+
+	// IngressEntryPoint is the Traefik entry point name that app routes are
+	// attached to (default: "apps").
+	IngressEntryPoint string `json:"ingressEntryPoint" pflag:",Traefik entry point name for app ingress routes"`
+
+	// IngressAppsDomain is the domain suffix for subdomain-based app URLs.
+	// Apps are exposed at {name}-{project}-{domain}.{IngressAppsDomain}.
+	// Use "localhost" for local devbox (resolves without /etc/hosts on macOS/Linux).
+	// Windows users can override to e.g. "localtest.me".
+	IngressAppsDomain string `json:"ingressAppsDomain" pflag:",Domain suffix for app subdomain URLs"`
+
+	// IngressAppsPort is the port appended to the public app URL (e.g. 30081).
+	// Set to 0 to omit the port when behind a standard 80/443 proxy.
+	IngressAppsPort int `json:"ingressAppsPort" pflag:",Port for app subdomain URLs (0 = omit)"`
+
+	// DefaultEnvVars is a list of environment variables injected into every KService
+	// pod at deploy time, in addition to any env vars specified in the app spec.
+	// Use this to inject cluster-internal endpoints (e.g. _U_EP_OVERRIDE) that app
+	// processes need to connect back to the Flyte manager.
+	DefaultEnvVars []EnvVar `json:"defaultEnvVars" pflag:"-,Default env vars injected into every app pod"`
+}
+
+// EnvVar is a name/value environment variable pair for app pod injection.
+type EnvVar struct {
+	Name  string `json:"name"`
+	Value string `json:"value"`
+}

app/internal/config/config.go

@@ -1,19 +1,7 @@
 package config
 
-import "time"
+import appconfig "github.com/flyteorg/flyte/v2/app/config"
 
-// InternalAppConfig holds configuration for the data plane app deployment controller.
-type InternalAppConfig struct {
-	// Enabled controls whether the app deployment controller is started.
-	Enabled bool `json:"enabled" pflag:",Enable app deployment controller"`
-
-	// BaseDomain is the base domain used to generate public URLs for apps.
-	// Apps are exposed at "{name}-{project}-{domain}.{base_domain}".
-	BaseDomain string `json:"baseDomain" pflag:",Base domain for app public URLs"`
-
-	// DefaultRequestTimeout is the request timeout applied to apps that don't specify one.
-	DefaultRequestTimeout time.Duration `json:"defaultRequestTimeout" pflag:",Default request timeout for apps"`
-
-	// MaxRequestTimeout is the hard cap on request timeout (Knative max is 3600s).
-	MaxRequestTimeout time.Duration `json:"maxRequestTimeout" pflag:",Maximum allowed request timeout for apps"`
-}
+// InternalAppConfig is an alias of the public config type so internal packages
+// can import it without depending on the public app/config path directly.
+type InternalAppConfig = appconfig.InternalAppConfig