istio: allow to change tls cipher suites and headers
Signed-off-by: Pascal Sthamer <10992664+P4sca1@users.noreply.github.com>
This commit is contained in:
@@ -32,6 +32,9 @@ spec:
|
||||
tls:
|
||||
credentialName: {{ .Values.istio.gateway.https.tlsCredentialName }}
|
||||
mode: SIMPLE
|
||||
{{- with .Values.istio.gateway.https.tlsCipherSuites }}
|
||||
cipherSuites: {{- include "common.tplvalues.render" ( dict "value" . "context" $ ) | nindent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.istio.gateway.extraServers }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.istio.gateway.extraServers "context" $) | nindent 4 }}
|
||||
|
||||
@@ -14,7 +14,8 @@ spec:
|
||||
gateways:
|
||||
- {{ include "common.names.fullname" . }}
|
||||
http:
|
||||
- match:
|
||||
- name: backend
|
||||
match:
|
||||
- uri:
|
||||
prefix: /api
|
||||
route:
|
||||
@@ -22,9 +23,16 @@ spec:
|
||||
host: {{ include "shuffle.backend.name" . }}
|
||||
port:
|
||||
number: {{ .Values.backend.containerPorts.http }}
|
||||
- route:
|
||||
{{- with .Values.istio.virtualService.backendHeaders }}
|
||||
headers: {{- include "common.tplvalues.render" ( dict "value" . "context" $ ) | nindent 8 }}
|
||||
{{- end }}
|
||||
- name: frontend
|
||||
route:
|
||||
- destination:
|
||||
host: {{ include "shuffle.frontend.name" . }}
|
||||
port:
|
||||
number: {{ .Values.frontend.containerPorts.http }}
|
||||
{{- with .Values.istio.virtualService.frontendHeaders }}
|
||||
headers: {{- include "common.tplvalues.render" ( dict "value" . "context" $ ) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
Reference in New Issue
Block a user