-
-
Notifications
You must be signed in to change notification settings - Fork 64
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add istio gateway template #183
base: master
Are you sure you want to change the base?
Conversation
@yciabaud awesome. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
see comments
9eb582b
to
6338fb8
Compare
c936e35
to
0cd7ca4
Compare
0cd7ca4
to
b6bd15e
Compare
Sorry I forgot to come back here for a while, I have updated my PR, feel free to have a look at it. |
@@ -314,3 +314,28 @@ ingress: | |||
# - secretName: server-tls | |||
# hosts: | |||
# - domain.com | |||
|
|||
# Istio gateway | |||
istio_gateways: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we add []
since the list is commented out?
istio_gateways: | |
istio_gateways: [] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@goruha 👆
@@ -65,3 +65,29 @@ deployment: | |||
## https://github.com/jtblin/kube2iam | |||
# iam.amazonaws.com/role: role-arn | |||
labels: {} | |||
|
|||
istio_gateways: | |||
- name: gateway1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@yciabaud I think we should change the pattern now istio_gateways
defined
istio_gateways:
gateway1:
enabled: true
selector:
istio: istio-gateway
servers:
- hosts:
- '*.domain.com'
port:
name: http
number: 80
protocol: HTTP
tls:
httpsRedirect: true
- hosts:
- '*.domain.com'
port:
name: http-tls
number: 443
protocol: HTTP
tls:
mode: SIMPLE
privateKey: /etc/istio/ingressgateway-certs/tls.key
serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
check the comments
Hi there I made a little addition to your project, I made a PR from it it you are interested in it too.
This adds the ability to create a istio gateway crd to expose istio services in an ingress gateway.