istio: allow to change tls cipher suites and headers

Signed-off-by: Pascal Sthamer <10992664+P4sca1@users.noreply.github.com>
This commit is contained in:
Pascal Sthamer
2025-02-20 15:16:49 +01:00
parent f09d8b6751
commit 53a7d2f2c4
5 changed files with 46 additions and 2 deletions
@@ -32,6 +32,9 @@ spec:
tls:
credentialName: {{ .Values.istio.gateway.https.tlsCredentialName }}
mode: SIMPLE
{{- with .Values.istio.gateway.https.tlsCipherSuites }}
cipherSuites: {{- include "common.tplvalues.render" ( dict "value" . "context" $ ) | nindent 10 }}
{{- end }}
{{- end }}
{{- if .Values.istio.gateway.extraServers }}
{{- include "common.tplvalues.render" (dict "value" .Values.istio.gateway.extraServers "context" $) | nindent 4 }}
@@ -14,7 +14,8 @@ spec:
gateways:
- {{ include "common.names.fullname" . }}
http:
- match:
- name: backend
match:
- uri:
prefix: /api
route:
@@ -22,9 +23,16 @@ spec:
host: {{ include "shuffle.backend.name" . }}
port:
number: {{ .Values.backend.containerPorts.http }}
- route:
{{- with .Values.istio.virtualService.backendHeaders }}
headers: {{- include "common.tplvalues.render" ( dict "value" . "context" $ ) | nindent 8 }}
{{- end }}
- name: frontend
route:
- destination:
host: {{ include "shuffle.frontend.name" . }}
port:
number: {{ .Values.frontend.containerPorts.http }}
{{- with .Values.istio.virtualService.frontendHeaders }}
headers: {{- include "common.tplvalues.render" ( dict "value" . "context" $ ) | nindent 8 }}
{{- end }}
{{- end }}