Internal reverse proxy

[sanderegg]

What do these changes do?

the main traefik instance must not create rules for services internal to the simcore stack(s). therefore it will filter out services that define the io.simcore.zone as a label.

Bonus:

• adds the sslheader to fix the socket.io connection
• adds an auth-protected internal whoami service to help debugging
• adds an auth-protected busybox service to allow accessing traefik internal REST API to help debugging
• updated traefik from v2.0 to v2.2
• updated graylog from 3.1 to 3.2
• cleaned base deployment configuration
• fixes make up-local always restarting docker engine in linux
• added hadolint
• added adminer in local-deploy script

Important:

• switched to Github actions for building deployment-agent
• deployment-agent migrated to debian-based image due to ujson issues in building

Related issue number

Checklist

• I think the code is well written
• Unit tests for the changes exist
• Documentation reflects the changes
• Runs in the swarm
• If you design a new module, add your user to .github/CODEOWNERS

[codecov]

Codecov Report

Merging #59 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #59   +/-   ##
=======================================
  Coverage   78.14%   78.14%           
=======================================
  Files          22       22           
  Lines         874      874           
=======================================
  Hits          683      683           
  Misses        191      191           

Flag	Coverage Δ
#unittests	78.14% <0.00%> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 2c8ed9a...2c8ed9a. Read the comment docs.