Helm chart for deploying Istio gateways
- Kubernetes Cluster deployed
- Kubernetes config installed in
~/.kube/config - Helm installed
Install Helm
https://helm.sh/docs/intro/install/
- Clone down the repository
- cd into directory
helm install gateway chart/| Key | Type | Default | Description |
|---|---|---|---|
| mtls.mode | string | "STRICT" |
STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic |
| networkPolicies.enabled | bool | true |
|
| networkPolicies.prependReleaseName | bool | true |
|
| gateway.servers[0].hosts[0] | string | "*.dev.bigbang.mil" |
|
| gateway.servers[0].port.name | string | "http" |
|
| gateway.servers[0].port.number | int | 8080 |
|
| gateway.servers[0].port.protocol | string | "HTTP" |
|
| gateway.servers[0].tls.httpsRedirect | bool | true |
|
| gateway.servers[1].hosts[0] | string | "*.dev.bigbang.mil" |
|
| gateway.servers[1].port.name | string | "https" |
|
| gateway.servers[1].port.number | int | 8443 |
|
| gateway.servers[1].port.protocol | string | "HTTPS" |
|
| gateway.servers[1].tls.credentialName | string | "public-cert" |
|
| gateway.servers[1].tls.mode | string | "SIMPLE" |
|
| waitJob.enabled | bool | true |
|
| waitJob.permissions.apiGroups[0] | string | "" |
|
| waitJob.permissions.apiGroups[1] | string | "apps" |
|
| waitJob.permissions.resources[0] | string | "pods" |
|
| waitJob.permissions.resources[1] | string | "deployments" |
|
| waitJob.permissions.verbs[0] | string | "patch" |
|
| waitJob.permissions.verbs[1] | string | "list" |
|
| waitJob.permissions.verbs[2] | string | "get" |
|
| waitJob.permissions.verbs[3] | string | "watch" |
|
| upstream | object | {"labels":{"istio":"ingressgateway"},"service":{"ports":[{"name":"tcp-status-port","port":15021,"protocol":"TCP","targetPort":15021},{"name":"http2","port":80,"protocol":"TCP","targetPort":8080},{"name":"https","port":443,"protocol":"TCP","targetPort":8443}],"type":"LoadBalancer"}} |
Values passed to the upstream istio gateway chart. See the upstream chart's values.yaml for configuration options. |
| upstream.labels.istio | string | "ingressgateway" |
We set this label by default to more easily integrate with other Big Bang components. |
Please see the contributing guide if you are interested in contributing.
This file is programatically generated using helm-docs and some BigBang-specific templates. The gluon repository has instructions for regenerating package READMEs.