infra: add load balancer configuration to Pulumi

[guilhem-fry]

Because the API is public, we want to introduce rate limiting as a preventive measure against DDOS attacks. In GCP, Rate Limiting is set up via a Cloud Armor policy.

Unfortunately Cloud Armor policies cannot be attached to NEG and serverless services such as Cloud Run services. Typically, they are attached to load balancers.

As such, the trick is to create a load balancer that will sit in front of our cloud run services, and attach the rate limiting policy to it.

This PR creates the Load Balancer. As part of what makes a load balancer, the following resources are created:

• Public IPV4 address
• SSL certifivate
• Backend service (cloudrun)
• NEG region group
• URL routing from HTTPS to the backend service
• URL routing from HTTP to HTTPS via redirect
• Global forwarding rule

[guilhem-fry]

.deploy

(This comment will trigger a Pulumi deployment of the PR as a feature-branch environment. See this action.)

[github-actions[bot]]

⚠️ Cannot proceed with deployment

No matching environment target found. Please check your command and try again. You can read more about environment targets in the README of this Action.