Context

In the spike LOG-7370 we decided to follow the approach to introduce a new "light gateway" to allow mTLS authentication across clusters. To accomplish this we decided to write a new custom reverse proxy in loki-operator repo that will allow us to:

• Continue doing authentication via TLS
• Aggregate both the Distributor and Query Preformance endpoints
• Passthrough the tenancy header

We decided for now to create this new component in the loki-operator folder to allow it for now to make it more shippable.

Acceptance Criteria

• Develop the new reverse proxy
• Benchmark briefly against something like observatorium/api
• Make sure to allow TLS customization to comply with OCP TLS Profiles