istio: allow to change tls cipher suites and headers

Signed-off-by: Pascal Sthamer <10992664+P4sca1@users.noreply.github.com>
2025-02-20 15:16:49 +01:00
parent f09d8b6751
commit 53a7d2f2c4
5 changed files with 46 additions and 2 deletions
@@ -2366,6 +2366,12 @@
                                    "type": "string",
                                    "description": "The name of the secret that holds the TLS certs including the CA certificates.",
                                    "default": ""
+                                },
+                                "tlsCipherSuites": {
+                                    "type": "array",
+                                    "description": "If specified, only support the specified cipher list.",
+                                    "default": [],
+                                    "items": {}
                                }
                            }
                        },
@@ -2384,6 +2390,16 @@
                            "type": "object",
                            "description": "Additional annotations for the VirtualService resource.",
                            "default": {}
+                        },
+                        "backendHeaders": {
+                            "type": "object",
+                            "description": "Header manipulation rules for backend traffic",
+                            "default": {}
+                        },
+                        "frontendHeaders": {
+                            "type": "object",
+                            "description": "Header manipulation rules for frontend traffic",
+                            "default": {}
                        }
                    }
                }